Gate
Planned (Phase 6)Package firewall: install a release only when independent machines rebuilt the same bytes from its public source.
Package lookup
- Ecosystem (PyPI, later npm), name, version
- Result: match · mismatch · not reproducible
- Independent rebuilds that agree
- Rebuild receipt
Mismatch explainer
- Plain-words reason from the AI agent, e.g. "this package contains a .pth file that is not in the source"
- Link to an upstream fix if one exists
Proxy setup
- pip index URL to copy
- npm registry setting to copy
Organisation
- Blocked installs log
- Allow and deny policies
- Members
- Coverage: top 500 PyPI packages first