PUBLISH GATE

gate v0.4.1

host mia clean-room /tmp/pubgate 2026-07-16 09:41 ET

Nothing leaves this machine until every gate is green. Pick a project → clean-room export → scans → verdict → publish.

Projects

5 registered · 2 published · 1 blocked

moltbook-monitor

moltbook feed watcher

NODE1.2 MB · 87 files

last export 2026-06-28

PUBLISHED ✓

llm-council

multi-model deliberation

NODE3.1 MB · 214 files

last export 2026-07-16

BLOCKED ✗

research-assistant

cited deep-research CLI

PYTHON5.8 MB · 342 files

last export —

NEVER SCANNED

agent-sandbox

AgentSim

PYTHON2.4 MB · 156 files

last export 2026-07-03

PUBLISHED ✓

ceo-super-agent

Cortex

NODE7.9 MB · 511 files

last export —

NEVER SCANNED

Gate Run

6 checks · sequential · any BLOCK halts publish

llm-council → github.com/byronarnao/llm-council run #0047 · 2026-07-16 09:38:12 ET · 41.6s ● HALTED AT STEP 3/6

✓

Clean-room export

Fresh snapshot to /tmp/pubgate/llm-council-0047 — no .git carried. Single-commit publish — history never leaves the machine.

PASS
214 files · 3.1 MB
0 git objects · 0.9s

✓

Secrets scan · gitleaks detect --no-git

447 rules against the snapshot. Entropy + regex classes: cloud keys, tokens, private keys, connection strings.

PASS
0 findings · 1.8s

✗

Verified secrets · trufflehog filesystem --only-verified

Every candidate credential is tested against its provider. Only live keys block.

ANTHROPIC_API_KEY sk-ant-api03-•••••••• VERIFIED LIVE

server/config.js:14

Remediation: move to env; key must be rotated regardless — it’s in local history.

BLOCK
1 verified live key
12.4s

PII pass · presidio + custom pack

Emails, phones, absolute paths, real names. WARN by default — redact or acknowledge each before publish.

EMAIL byron.arnao@gmail.com package.json:6 ("author")

PATH /Users/byronarnao/openclaw-stack/… lib/loader.js:31 (comment)

PHONE +1 (914) 555-0183 test/fixtures/users.json:12

WARN
3 findings · 6.2s

✓

Blocked-file classes · manifest deny-list

File classes that never ship, excluded before scan:

✓.env ×1 ✓*.pem ×0 ✓*.sqlite ×2 ✓.replit ×1 ✓node_modules/ pruned

PASS
4 excluded by manifest
0.3s

◆

LLM adversarial review · claude — “what would you steal from this repo?”

Semantic pass over the snapshot — catches what regex can’t.

“config.js builds an authenticated URL from two innocuous-looking constants — BASE_HOST + TENANT_SEG concatenate into a private gateway endpoint. Neither string trips a scanner alone. Flagged for human review.”

— adversarial reviewer · sonnet · 18.0s · 1 flag

REVIEW
1 human flag · 18.0s

Publish Ledger

every publish, ever · append-only

Project	Date	Scans	Destination
agent-sandbox AgentSim	2026-07-03	6/6 PASS	github.com/byronarnao/agent-sandbox public · issues/PRs OFF · secret-scanning ON · push-protection ON
moltbook-monitor	2026-06-28	6/6 PASS	github.com/byronarnao/moltbook-monitor public · issues/PRs OFF · secret-scanning ON · push-protection ON
council-toolsCODE-AGENTS REPO	2026-06-19	6/6 PASS	github.com/byronarnao/council-tools public · issues/PRs ON · secret-scanning ON · CI hardened for agent contributions CodeQLDependabotgitleaks-action
llm-council	2026-07-16	HALTED 3/6	— not created blocked by trufflehog (1 verified live key) · run #0047