Deterministic governance engine

Same inputs. Same rules. Same decision.

Covenant Gate evaluates proposals against fixed, versioned policies and returns allow or deny with explicit reason codes. Every decision is sealed into a hash-chained ledger you can replay later, so drift is visible instead of silent. It installs on your Windows computer and runs there; nothing is sent to us.

Get the installer See how it works

Runs on your machineNo randomness or hidden stateFails closedReplayable evidence

ledger / policy_decisionsSealed just now

Decision

// sealed decision record (illustrative) { "decision": "deny", "reason": "protected file: AI change not allowed", "action": "write file", "origin": "AI assistant", "policy": "9c41...e07a", "input": "3b7d...51f2", "record": "e8a0...4c9d", "previous": "71f5...b382" }

Replay

replay of decision 3b7d...51f2 policy 9c41...e07a (pinned version) input 3b7d...51f2 (canonical, SHA-256) recorded deny protected file replayed deny protected file MATCH identical decision, reasons and hashes

Replaying a decision recomputes it from the stored proposal and the pinned policy. A different result means tampering or unintended change. Values shown are illustrative.

✓Anchor verified
ledger head signed, P-256

0sources of randomness in the evaluator

SHA-256canonical input and ledger hashing

P-256signed ledger anchors

1,000×2randomized requests, identical twice (stress test)

Everything, sealed

From proposal to proof.

Deterministic evaluation

Inputs are canonicalized and hashed. Policies are pinned by hash. The evaluator does no I/O, reads no clock and has no hidden state.

Sealed, append-only ledger

Each decision is chained to the one before it. Editing any entry breaks the chain at that point, and signed anchors catch truncation or a rewritten history.

Replay and drift detection

Any decision can be re-run against the original proposal and policy version. If the answer changes, you find out immediately.

Built for AI-era work

Enforced where work actually happens.

The same engine sits in front of the places changes are made, and it denies by default when anything is missing or unclear.

Git hooks and a required CI check judge every commit, including AI-assisted ones.
A Claude Code hook and an MCP tool server govern what AI assistants may write, run or fetch.
Protected paths, secrets and destructive commands are blocked for AI, and gated to admins for people.

Explore enforcement

commit by AI assistant: "update rules" BLOCKED protected governance file reason: AI changes to rules are not allowed 1 change checked, 1 blocked commit by administrator: "update rules" ALLOWED reviewed and re-pinned by a person 2 changes checked, 0 blocked

What it is not

An instrument, not an opinion.

Covenant Gate is not an AI, not a recommendation system and not a probabilistic engine. Like a measurement device, it must return the same value when the same measurement is taken twice. If it cannot, it is considered broken.

TIGHTEN ONLY

Overlays can only restrict

Organizations add overlays to narrow what the base policy allows. Any overlay that would widen authorization fails closed when the policy loads.

LOCAL ONLY

Your machine, your records

Covenant Gate is a Windows installer. Every decision is made and recorded on your own computer; there is no cloud evaluator and no decision data leaves it.

FAIL CLOSED

Unclear means no

Missing config, a policy that no longer matches its pin, or a decision that cannot be recorded: every one of them is a deny.

Ready when you are

Governance you can measure.

Choose a licence, download the Windows installer and protect your first repository in minutes.

See plans