@atrib/action-gate 0.0.1 → 0.0.3

package/README.md

@@ -1,48 +1,20 @@
 # @atrib/action-gate
 
-`@atrib/action-gate` signs policy decisions and outcomes around high-impact
-agent actions before the action body runs.
+`@atrib/action-gate` signs policy decisions and outcomes for actions a host
+needs to check before execution.
 
 Use it when a host already knows where an action boundary is: browser
 automation, computer use, support tooling, payment workflows, admin changes, or
 production writes. The host owns policy, identity, approval UI, and execution.
-Atrib records what the host decided and what happened next.
+atrib records what the host decided and what happened next.
 
-The core use case is an action that must outlive the session that proposed it.
-One browser or computer-use run can sign the proposed action, policy decision,
-and outcome. A later session, a different agent, or a reviewer team can accept
-those hashes as verifiable context before continuing work.
-
-## Release state
-
-`@atrib/action-gate` is a publish target, but the package has not been created
-on npm yet. Use the workspace dependency or a packed tarball until the manual
-first publish creates version `0.0.1`. Later releases use npm Trusted Publisher
-through `.github/workflows/release.yml`.
+Use the signed hashes when follow-up work needs a stable reference to the same
+action. A browser click, desktop action, support reply, admin change, or
+payment-impacting step can move through recall, handoff, review, or verifier
+workflows without exposing raw runtime payloads in public records.
 
 ## Install
 
-Inside the monorepo, depend on the workspace package:
-
-```json
-"@atrib/action-gate": "workspace:*"
-```
-
-Before the first npm publish, test the packed tarball from a clean temp project:
-
-```bash
-npx -y pnpm@9.15.4 --filter @atrib/action-gate build
-cd packages/action-gate
-tarball=$(npx -y pnpm@9.15.4 --silent pack --pack-destination /tmp | tail -n 1)
-tmpdir=$(mktemp -d)
-cd "$tmpdir"
-npm init -y
-npm install "$tarball"
-node --input-type=module -e "import('@atrib/action-gate').then((m) => console.log(Object.keys(m).sort()))"
-```
-
-After the first npm release:
-
 ```bash
 pnpm add @atrib/action-gate
 ```
@@ -114,15 +86,15 @@ not run. If an allowed action body throws, the package signs an
 ## Boundary
 
 This package does not issue authorization, run a browser, store raw session
-data, or replace a host policy engine. It gives hosts a small control/proof
+data, or replace a host policy engine. It gives hosts a small action-gate
 contract:
 
 1. propose an action;
 2. evaluate policy before execution;
 3. run only when allowed;
 4. sign the decision and outcome;
-5. pass the accepted record hashes to a later session, another agent, a reviewer
-   team, or a proof packet.
+5. pass the accepted record hashes into recall, handoff, review, verifier, or
+   proof-packet workflows.
 
 Browserbase, Stagehand, browser-use, Playwright, OpenAI Computer Use, hosted
 desktop runtimes, and support tools can keep their own automation layer while

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atrib/action-gate",
-  "version": "0.0.1",
+  "version": "0.0.3",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -13,7 +13,7 @@
   "files": [
     "dist"
   ],
-  "description": "Host-owned action gate helpers for Atrib's verifiable action layer. Signs policy decisions and outcomes before high-impact agent actions run.",
+  "description": "Host-owned action gate helpers for atrib's verifiable action layer. Signs policy decisions and outcomes before high-impact agent actions run.",
   "author": "atrib <hello@atrib.dev>",
   "license": "Apache-2.0",
   "homepage": "https://atrib.dev",