Standards enforced at build time.
Paste a dependency manifest. The Build Gate checks for required approved SDKs, disallowed versions, pinning, and a lockfile — and emits a manifest. Standards as code, not a reminder.
Deterministic gate onlineStandards enforced at build time
Deterministic — the same packet returns the same verdict and hash, every run. Your result appears on the right →
Operationally useful with visible findings. Nothing is silently waived.
Build-time standards-as-code
Approved SDK presence
Dependency + version manifest
A required approved dependency (security / observability / MCP SDK) is not present.
Missing-required-dependency signal detected.Add the required approved dependencies before the build can pass.
A dependency is outside approved version ranges or has a known issue.
Disallowed / vulnerable version signal detected.Upgrade to an approved, patched version range.
Version ranges or 'latest' allow unapproved versions into the build.
Unpinned-version signal detected.Pin to approved version ranges and enforce at build time.
No lockfile is present to make the build reproducible.
Missing-lockfile signal detected.Commit a lockfile and emit a dependency manifest at build time.
Engineering suite deterministic rule corpus
Input packet hash
BUILD GATE enforce gate
4 finding(s), score 46