PCAE Gates, Merkle Spec & MCP Matrix
Filter all 7 deterministic gates (`G1_SECURITY` .. `G7_TEMPORAL_MEMORY`), cryptographic proofs, MCP tools, and HTTP endpoints.
| Identifier | Category | Specification |
|---|---|---|
G1_SECURITY | PCAE Gate | AgentShield: Blocks prompt overrides, zero-width/Base64 smuggling, SSRF (`169.254.169.254`), and `.env`/`.ssh` exfil. |
G2_BUDGET_ROUTING | PCAE Gate | SynapseRouter: Enforces `cost_usd <= budget_cap_usd`, 120k token ceilings, and blocks frontier-tier waste. |
G3_SWARM_LEASES | PCAE Gate | SwarmWeaver: Evaluates `file_reads` and `file_writes` against active peer `fnmatch` glob leases. |
G4_TRAJECTORY_HEALTH | PCAE Gate | AgentFlight: Detects `A <-> B` oscillation, repeated failing calls, and invalid MCP schemas. |
G5_ANTI_REWARD_HACK | PCAE Gate | PatchPilot: Dual-tree Python AST audit flagging deleted tests, `assert True`, `@pytest.mark.skip`, and bare except. |
G6_TRUTH_GROUNDING | PCAE Gate | TruthGate: Blocks phantom citations (`[doc_99]`), negation polarity flips, numeric drift, and nonexistent AST symbols. |
G7_TEMPORAL_MEMORY | PCAE Gate | Cortex-MCP: Blocks decisions backed by expired (`valid_until != None`) or superseded (`superseded_by != None`) facts. |
0x00 || canonical_json | RFC 6962 | Domain-separated leaf digest over 9 ordered leaves: `INPUT_DIGEST`, `G1..G7`, `OUTPUT_DIGEST`. |
0x01 || L || R | RFC 6962 | Domain-separated internal node hash preventing second-preimage Merkle collisions. |
O(log N) Inclusion Proof | Attestation | 4 sibling hashes proving a single gate verdict without revealing prompts or source diffs. |
aegis_attest_agent_run | MCP Tool | Evaluates all 7 PCAE gates and returns signed `AegisAttestationBundle` plus PR Markdown card. |
aegis_verify_merkle_proof | MCP Tool | Verifies an `O(log N)` RFC 6962 inclusion proof or selective-disclosure package against a Merkle root. |
aegis_list_gates | MCP Tool | Returns all 7 PCAE gate IDs, upstream Codesphere engines, and invariants (`readOnlyHint: true`). |
aegis_run_benchmark | MCP Tool | Executes the 35-scenario benchmark suite returning recall, clean FPR, proof accuracy, and P50/P95 ms. |
aegis://gates/catalog | MCP Resource | Catalog resource alongside `aegis://merkle/rfc6962-spec`, `aegis://benchmark/summary`, and `aegis://gates/{gate_id}`. |
audit-agent-pr | MCP Prompt | Prompt template paired with `verify-selective-disclosure` and `remediate-gate-violation`. |
POST /api/attest | HTTP REST | Evaluates an `AgentRunBundle` and emits RFC 6962 attestation bundle (`413` body size guard enforced). |
POST /mcp & GET /mcp | HTTP MCP | Streamable HTTP JSON-RPC 2.0 endpoint and Server-Sent Events stream (`X-Request-ID`, `nosniff`). |