consensus-deployment-guard

INLINECODE0 is the final safety gate before deployment execution.

What this skill does

• - validates deployment requests against a strict JSON schema (reject unknown fields)
• evaluates hard-block and rewrite policy flags for release risk patterns
• runs deterministic persona-weighted voting (or aggregates external votes)
• returns one of: INLINECODE1
• writes decision artifacts for replay/audit

Decision policy shape

Hard-block examples:

• - required tests not passing
• CI status failed
• rollback artifact missing when required
• incompatible schema migration
• error budget already breached

Rewrite examples:

• - production rollout not using canary when policy requires it
• initial rollout percentage above policy limit
• production deploy missing explicit human confirmation gate
• CI still pending
• schema compatibility unknown

Runtime and safety model

• - runtime binaries: node, INLINECODE3
• network behavior: none in guard decision logic
• environment config read by this package: CONSENSUS_STATE_FILE, INLINECODE5
• filesystem writes: consensus board/state artifacts under configured state path

Invoke contract

• - INLINECODE6

Modes:

• - mode="persona" (default): use local deterministic persona defaults for internal voting
• INLINECODE8: consume external_votes[], aggregate deterministically, and enforce policy

Install

CODEBLOCK0

Quick start

CODEBLOCK1

Tests

CODEBLOCK2

Coverage includes schema rejection, hard-block paths, rewrite paths, allow paths, idempotent retries, and external-agent aggregation behavior.

See also: SECURITY-ASSURANCE.md for threat model, runtime boundaries, and deployment hardening guidance.