Overview

Posture

acme-baseline 1.0.0 is enforcing: some calls are refused outright.

The decision chain verifies: no row has been removed, edited, or reordered since it was written.

What is not covered

This gate decides tool calls. It does not sandbox plugin code — a plugin's apply() runs with full privileges before any tool call exists — and it does not secure the harness itself. Approvals record what was decided, never who decided it.