{"id":"agent-release-readiness-gate","card_id":"card_agent_release_readiness_gate","name":"Agent release readiness gate","description":"Aggregates supplied release checks into PASS/WATCH/BLOCK so agents know whether a card or wrapper is safe to publish.","stage":1,"safety_level":"data_only_read_only","auth":{"type":"hmac-sha256","required_headers":["x-apex-tool-timestamp","x-apex-tool-nonce","x-apex-tool-content-sha256","x-apex-tool-signature"],"canonical_payload":"APEX-TOOL-V1\\n{tool_id}\\n{timestamp}\\n{nonce}\\n{sha256(canonical_json(body))}"},"permissionless":{"enabled":true,"tier":"bounded_public","rate_limit":"Shared 20 calls per IP per hour across permissionless bounded tools plus global agent-write protection","review_required":false,"note":"Anonymous bounded execution is allowed because this is a deterministic DATA ONLY release checklist over caller-supplied booleans/evidence. It does not deploy, publish, read files, or call CI."},"input_schema":{"type":"object","properties":{"checks":{"type":"object"}}},"output_schema":{"type":"object","properties":{"decision":{"type":"string"},"missing_required":{"type":"array"}}},"sample_input":{"checks":{"typecheck":true,"tests":true,"build":true,"secret_scan":true,"license_review":true,"no_raw_source":true,"signed_wrappers":true,"monitoring":false}},"test_vectors":[{"input":{"checks":{"typecheck":true,"tests":true,"build":true,"secret_scan":true,"license_review":true,"no_raw_source":true,"signed_wrappers":true,"monitoring":false}},"expected":{"result":{"decision":"WATCH","quality_score":75,"commercial_release_ready":false,"missing_required":[],"missing_recommended":["api_contract","db_migration","i18n","monitoring","rollback"]}},"match":"subset","verified_at":"2026-07-04T06:30:00.000Z"},{"input":{"checks":{"typecheck":true,"tests":false,"build":true,"secret_scan":false,"license_review":true,"no_raw_source":true,"signed_wrappers":true,"monitoring":true,"rollback":true}},"expected":{"result":{"decision":"BLOCK","quality_score":49,"commercial_release_ready":false,"missing_required":["tests","secret_scan"],"missing_recommended":["api_contract","db_migration","i18n"],"required_before_upload":["Complete tests before publishing or promoting the card.","Complete secret_scan before publishing or promoting the card."]}},"match":"subset","verified_at":"2026-07-04T06:30:00.000Z"}]}