All gates
1083 allow
1047 ask
49 block
Thirteen gates resolve every shell command tool-gates sees. Each page below is generated from its rules/*.toml source, so what you read here is the rule set the engine actually runs. Gates are listed alphabetically; the priority column is the order the engine tries them, and basics always runs last.
- Basic Utilities catch‑all, no per-program rules 100 priority The default-safe list. No per-program rules: one allowlist of read-only utilities, and anything unrecognized falls through to the client.
- Beads Tracker (bd) 220 rules 22 priority Git-native issue tracker. Reads are safe, writes ask. Nothing is hard-blocked, because every state mutation is recoverable through git.
- Cloud Providers 419 rules 15 priority Cloud CLIs and container orchestration: AWS, GCP, Azure, Kubernetes, Docker, Terraform.
- Development Tools 165 rules 25 priority Tools that can modify files. Linters and type checkers inspect by default and ask once a write flag appears.
- Filesystem Operations 22 rules 30 priority Everything that touches disk. Small, and the densest block floor per rule of any gate.
- Git 106 rules 10 priority History and inspection pass through. Writes to the tree, the index, or a remote pause for approval. Never hard-blocked here.
- GitHub CLI 134 rules 10 priority Listing, viewing, searching, and the read API are safe. Mutations ask. Repository deletion is hard-blocked.
- Language Runtimes 85 rules 27 priority Version and syntax-check flags are safe. Anything that executes code asks first.
- Network & HTTP 39 rules 35 priority GET requests and head checks pass through. Mutating, downloading, and interactive calls pause for approval.
- Package Managers 453 rules 20 priority Listing, inspecting, and auditing are safe. Installing, removing, publishing, and running arbitrary scripts ask.
- Shortcut CLI 30 rules 45 priority Community issue-tracker CLI. Reads are safe, story and epic mutations ask.
- System Commands 498 rules 40 priority OS-level operations: power, disk, kernel modules, firewall, users, database clients, crypto. The largest block floor of any gate.
- Tool Gates CLI 17 rules 23 priority tool-gates protects itself. Read-only queries skip prompting; writes to settings files ask.
Counts come from the generated pages and move with rules/*.toml. To change what a gate decides, edit the TOML and rebuild — see Contributing.