gatekeep.sh
Guard the boundary. Validate the caller.
Defensive access control for AI agent systems.


## What This Is

Gatekeep is the perimeter. Every system has a boundary
between trusted and untrusted — gatekeep is that boundary,
made executable. Permission checks, caller validation,
scope enforcement. Not a wall, but a door that knows
who should pass.

In agent architectures, the gatekeep layer decides which
tools an agent can invoke, which files it can touch, which
APIs it can call. Security as infrastructure, not afterthought.
The shell that says "prove it" before "proceed."


## Views

  gatekeep.sh      Shell        → Run access control from CLI


## Network

  ┌─ Cluster: Dev Tools
  │
  ├─ netguard.cc       Network-level defense
  ├─ picket.cc         Perimeter monitoring
  │
  ├─ Cross-links:
  │  ├─ hypercontext.sh  Context-aware access decisions
  │  ├─ persist.sh       Durable access state
  │  ├─ checkpoint.cx    Snapshot before granting access
  │  └─ pylons.cc        Power infrastructure it protects
  │
  └─ skill.cc          Root namespace


Part of the skill.cc namespace