History

welsberr d31c506de8 Added more on hardening		2026-02-10 05:07:09 -05:00
..
tests	Added more on hardening	2026-02-10 05:07:09 -05:00
README.md	Expanded files with implementation stubs	2026-02-09 15:43:22 -05:00
__init__.py	Expanded files with implementation stubs	2026-02-09 15:43:22 -05:00
validate_and_quarantine_packets.sh	Expanded files with implementation stubs	2026-02-09 15:43:22 -05:00
validate_and_quarantine_tool_requests.sh	Expanded files with implementation stubs	2026-02-09 15:43:22 -05:00
validate_and_quarantine_tool_results.sh	Expanded files with implementation stubs	2026-02-09 15:43:22 -05:00
validate_common.py	Expanded files with implementation stubs	2026-02-09 15:43:22 -05:00
validate_research_packet.py	Expanded files with implementation stubs	2026-02-09 15:43:22 -05:00
validate_tool_request.py	Added 'Monty' usage plus policy etc.	2026-02-09 21:25:31 -05:00
validate_tool_result.py	Expanded files with implementation stubs	2026-02-09 15:43:22 -05:00

README.md

ThreeGate Tools

This directory contains stdlib-only validators and helper scripts.

Validators

validate_research_packet.py
Validates Research Packets before CORE consumption.
validate_tool_request.py
Validates Tool Requests before TOOL-EXEC execution.
validate_tool_result.py
Validates Tool Results before CORE consumption.

All validators are intentionally conservative.

Quarantine scripts

validate_and_quarantine_packets.sh
validate_and_quarantine_tool_requests.sh
validate_and_quarantine_tool_results.sh

These scripts:

run the relevant validator
move rejects into quarantine with validator output

Quick Start

From repo root:

chmod +x tools/*.py tools/*.sh
tools/validate_and_quarantine_packets.sh
tools/validate_and_quarantine_tool_requests.sh
tools/validate_and_quarantine_tool_results.sh

Adjust directories using env vars if needed.


---

## Next (recommended)
To complete the “loop” safely, the next step is a **TOOL-EXEC request runner stub** that:

1) validates a request  
2) stages `/in` + empty `/out`  
3) invokes `tool-exec/era/era-wrapper.sh`  
4) captures stdout/stderr + hashes  
5) emits a Tool Result `.md` to `results_out/`