{
  "claimBoundary": "CapitalGuard Agent Change Gate 0.1 quarantines exact UTF-8 file-write candidates outside the protected repository, compares them with exact regular-file preimages, applies deterministic path and content controls, signs privacy-reduced receipts, and requires an exact, expiring, one-use reviewer approval before atomic application. It does not understand arbitrary program semantics, prove code correctness or absence of vulnerabilities, control writes that bypass the gate, support deletions, symlinks, special files, binary files, or new parent directories, resist a compromised host or stolen authority key, or provide hardware attestation; rollback detection depends on retaining the separate signed state anchor.",
  "digestAlgorithm": "SHA-256",
  "files": [
    {
      "bytes": 1828,
      "path": "anchor.schema.json",
      "sha256": "d5e12740103f8d6b21154cde4c313e652c27a9181a34122bb78bdc976dd0d363"
    },
    {
      "bytes": 3416,
      "path": "approval.schema.json",
      "sha256": "2205cc552532910a2bf0c7f5d5ac1cfcd99e7668e0022ef4a8fe2eec1727450f"
    },
    {
      "bytes": 9661,
      "path": "change-set.schema.json",
      "sha256": "0aa300e9564669ab3ec433c3ae038d59a604cf6992589e413e3271bc81596773"
    },
    {
      "bytes": 2354,
      "path": "methodology.json",
      "sha256": "88d9a20de153d685262dc3c9d0ee33cedb01d6f2cadec87d4c159e3b65ddb5d2"
    },
    {
      "bytes": 1957,
      "path": "policy-spec.schema.json",
      "sha256": "50107ca988b4a5c9119603759a9e0d01a21c0e298c4f24dbb970d735543b0d58"
    },
    {
      "bytes": 3648,
      "path": "policy.schema.json",
      "sha256": "7ce67bf124c984a644b05a84a6632c1440034782f742f2b69916a0fd1a8ec653"
    },
    {
      "bytes": 6551,
      "path": "receipt.schema.json",
      "sha256": "cecf54ea3d9feb7bf8367189393f4836d6cbd0a6205b8b4e1e6c1b380f25b423"
    },
    {
      "bytes": 2621,
      "path": "state.schema.json",
      "sha256": "6c0f2f61cf6439e8c34f8a3a0cb9662383f345defb407ad345bb2d2d76b74983"
    },
    {
      "bytes": 2899,
      "path": "support-matrix.json",
      "sha256": "b132a85d000496790cdce1895cd6396ffe41af53ff9d610dab944d170aae295a"
    },
    {
      "bytes": 1403,
      "path": "test-vectors.json",
      "sha256": "8d40c2b452bb59bdb41644da68adb626eb0d1aaa2fd8ed6ab9955d05fa69a098"
    },
    {
      "bytes": 2399,
      "path": "threat-model.json",
      "sha256": "5efbb4a6b750e214269588360bbbedd64c9f5268eaaf3c2d5e28d7228958e363"
    }
  ],
  "id": "CG-AGENT-CHANGE-GATE-0.1.0-RELEASE",
  "licensedArtifacts": [
    {
      "bytes": 106922,
      "distribution": "licensed_delivery_only",
      "filename": "capitalguard-agent-change-gate.cjs",
      "id": "agent-change-gate-library",
      "sha256": "d0326f6b8cad95deadac8253a3a0239bbd3df079561c111e109acd1d99957925"
    },
    {
      "bytes": 123731,
      "distribution": "licensed_delivery_only",
      "filename": "capitalguard-agent-change-gate-cli.cjs",
      "id": "agent-change-gate-cli",
      "sha256": "937726b47b1f6f088b0c2592f4419c85673b0d1d20b439d2593feaa545c3af1f"
    },
    {
      "bytes": 3988,
      "distribution": "licensed_delivery_only",
      "filename": "capitalguard-agent-change-gate-guide.md",
      "id": "agent-change-gate-guide",
      "sha256": "c49fad42e4abe794800d9ea1ec19fbbee264d6d2dc2fa355c281b2422aa67e6e"
    }
  ],
  "publishedAt": "2026-07-19T05:30:00.000Z",
  "status": "stable",
  "version": "0.1.0",
  "releaseDigestSha256": "0b842de929c583a3c0daec0551e77794ebaf5f34dafd0d7664cf1073ffae70a3"
}