PreToolUse Gateway · 12 State Domains Active

Reversibility & Boundary Desk

Real-time action interception, fail-closed permit gating, and independent post-rollback state reconciliation.

The Rubicon Line — Effect Boundary Envelope
Fail-closed policy active
SAFE (ROLLBACK-COVERED)
── THE RUBICON LINE ──
EXTERNAL (UNCOVERED)
Recent agent decisions
0 recorded
No decisions yet. Start Bob with the PreToolUse hook configured.
Cryptographic receipts
0 verified
No receipts yet. Run the benchmark to generate verified receipts.
Domain coverage & rollback contract matrix
12 Domains Defined
DomainRollback CoverageEnforcement PolicyVerifier Adapter
WORKSPACE_TRACKEDRESTOREDCOVERED_REVERSIBLEfilesystem
WORKSPACE_IGNOREDBREACHBOUNDARY_REQUIRES_PERMITfilesystem
WORKSPACE_EXCLUDEDBREACHOUTSIDE_ROLLBACKfilesystem
VCS_LOCALUNKNOWNBOUNDARY_REQUIRES_PERMITgit
VCS_REMOTEBREACHOUTSIDE_ROLLBACKgit
DATABASE_STATEBREACHOUTSIDE_ROLLBACKsqlite
EXTERNAL_NETWORKBREACHOUTSIDE_ROLLBACKhttp_fixture
PROCESS_RUNTIMEBREACHOUTSIDE_ROLLBACKprocess
OUTSIDE_WORKSPACEBREACHOUTSIDE_ROLLBACKfilesystem
CREDENTIAL_STATEBREACHOUTSIDE_ROLLBACKfilesystem
PACKAGE_REGISTRYBREACHOUTSIDE_ROLLBACKregistry
UNKNOWNUNKNOWNUNKNOWN_EFFECTnone (fail-closed)