I built a deterministic CI firewall for AI-generated pull requests

Short summary

Agent Gate is a deterministic CI firewall for AI-generated pull requests that validates scope, workflow permissions, and control-plane drift—not an LLM reviewer. It checks merge-boundary questions: did the PR change files outside scope, did permissions escalate, did critical config files change? Open-source on GitHub Marketplace with phased rollout guidance starting in observe mode.

• •Deterministic CI checks for AI-generated PRs: scope, permissions, config drift
• •Runs safely from base branch, not an LLM reviewer
• •Open-source with phased rollout guidance (observe → warn → block)

Generated with AI, which can make mistakes.