gates_lint
Lint gate specs, plan-file gate lines, and ledgers without running CHECK commands to flag rules that cannot be met as written.
Instructions
Check gate specs, the gate lines of a plan file, or existing ledgers without running any CHECK: ledger spec rules (one argv command, segment split on |), the argv tokenizer, the command policy gates_check would apply, and EXPECT regex compilation. Problems mean the gate cannot be met as written regardless of the implementation. Writes nothing.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| cwd | No | CHECK working directory for the policy judgment, and base for relative plan_file and files. Defaults to the agent project directory. | |
| files | No | Existing gate ledger files to lint. | |
| gates | No | Gate specs: "ID: outcome | CHECK: command | EXPECT: expectation". | |
| plan_file | No | Plan file whose one-line gate specs or ledger-form gates are linted. Lines that mention CHECK: in another form are reported as not linted. | |
| env_allowlist | No | Environment variable allowlist the CHECKs will run with. Defaults to HOME,PATH. | |
| write_allowed | No | Judge CHECKs as gates_check with write access would run them. Default true. | |
| authority_file | No | HTTP only: from `issueops mcp authorize`; omit over stdio. | |
| workspace_root | No | Workspace root boundary for the policy judgment. Defaults to cwd. | |
| network_allowed | No | Judge CHECKs as gates_check with network access would run them. Default false. |