Turn a loose agent loose against a governance proxy. It loads a skill, does its in-scope work — and the moment it reaches for something outside scope, a deterministic gate holds the action before it executes and opens a ticket. No human watching. Set the skill's scope, aim the runaway's last reach, and press run. Each step's allow/block is computed by the real checkConformance paths/tools branch from kcp-harness, and the receipt is signed & verified with genuine crypto.subtle in your browser.
Set a scope and a target, then press ▶ Run autonomous agent. The agent steps through its plan; the gate decides each step deterministically — and halts the loop the instant one is out of scope.
Station 07 of 11. Each step's decision = the real checkConformance paths/tools branch from kcp-harness (verbatim: fail-closed hasScope → tool allowlist → per-target path prefix match via normalizePath / matchesPrefix). On a held step the action never executes, the loop halts, and a pending_review ticket opens — no human in the loop. Receipt signed & verified with genuine crypto.subtle.