kernel_gate
Route ONE proposed state-change through the kernel and get back the verdict (REJECT / QUARANTINE / CONFIRMED) plus the nine-field record — so you can DISCERN before you write (covenant rule 8: stop when the evidence is incomplete). CONFIRMED needs a real verification that HELD, an INDEPENDENT witness (witness != author), and the wait; anything else quarantines. This decides and records only — it never persists and never replaces the signature / consent checks on the real write.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| author | No | who produced it | |
| content | No | decision text to scan for the RED/FLOOR moral constraints — a hit on a non-negotiable (deception, exploitation, harm) REJECTS | |
| witness | No | who corroborated it — must differ from author | |
| artifact | Yes | the thing entering or changing state | |
| evidence | No | a verification verdict: HOLDS/PASS, BROKEN/MISMATCH, or ERROR/INCOMPLETE | |
| kind_hint | No | ||
| contradicts | No | ||
| authority_in | No | the authority it currently carries (default quarantined) | |
| wait_satisfied | No | ||
| in_kind_checked | No | was an in-kind lookup done first |