Decision Gate Docs

Deterministic, replayable gate evaluation with auditable decisions.

Asset Core docs

DG + AssetCore Architecture

High-Level Topology

High-level topology linking Decision Gate, AssetCore read services, and runpack artifacts. High-level topology linking Decision Gate, AssetCore read services, and runpack artifacts.

Namespace Authority Flow

Namespace authority validation between clients, Decision Gate, and AssetCore. Namespace authority validation between clients, Decision Gate, and AssetCore.

Evidence Anchoring Flow

Evidence anchoring flow from AssetCore read to Decision Gate runpack recording. Evidence anchoring flow from AssetCore read to Decision Gate runpack recording.

Auth Mapping (Integration Layer)

DG does not parse ASC auth tokens. An external integration layer verifies ASC principals and forwards a minimal principal context (tenant_id, principal_id, roles, policy_class, groups). Mapping defaults are conservative and fail-closed.

Schema Registry ACL (DG Internal)

Schema registry access is enforced inside DG after tool allowlists. Integration layer RBAC determines which tools are callable; DG’s registry ACL determines per-tenant/namespace read/write permission for schemas_*.

Reference: F:/docs/decision-gate/architecture/assetcore-integration-contract L13-L155