@jeger-ai/opengantry 3.2.5 → 3.3.0

package/templates/.gitagent/foreman/SUBSTRATE.version.json

@@ -1,6 +1,6 @@
 {
   "schema_version": "0.1.0",
-  "opengantry_version": "3.2.3",
+  "opengantry_version": "3.3.0",
   "installed_at": "2026-01-01T00:00:00.000Z",
   "installed_by": "gantry init"
 }

package/templates/.gitagent/planner/MISSION.schema.yaml

@@ -35,6 +35,16 @@ properties:
     minLength: 1
   gate_success_substring:
     type: ["string", "null"]
+  gate_adapter:
+    type: string
+    enum: [generic, eslint, tsc]
+    default: generic
+    description: >-
+      Explicit gate output parser (ADR-0041). generic: exit code + optional
+      success substring only. eslint: gate_command must emit `eslint --format
+      json`; tsc: gate_command must emit plain tsc diagnostics. Adapters map
+      tool output to envelope v3 findings with offending_file/line/rule_id.
+      Routing is never inferred from gate_command text.
   virtual_capture:
     type: boolean
     default: false
@@ -208,3 +218,44 @@ properties:
     items:
       type: string
       minLength: 1
+  depends_on:
+    type: array
+    default: []
+    description: >-
+      Cross-repo mission dependencies (ADR-0044). Resolved offline from fetched
+      refs/gxt/deps/<slug> ledger chains. gantry deps fetch is the only network
+      path; verify/doctor/check read local refs only.
+    items:
+      type: object
+      additionalProperties: false
+      required:
+        - repo
+        - msn_id
+      properties:
+        repo:
+          type: string
+          minLength: 1
+          description: Canonical host/owner/repo or git URL.
+        ref:
+          type: string
+          default: refs/gxt/ledger
+        msn_id:
+          type: string
+          pattern: "^MSN-[0-9]{4}$"
+        require:
+          type: object
+          additionalProperties: false
+          properties:
+            verify_status:
+              type: string
+              enum: [passed]
+              default: passed
+            signed:
+              type: boolean
+              default: false
+            max_age_days:
+              type: number
+              exclusiveMinimum: 0
+        expected_repository_hash:
+          type: string
+          pattern: "^[0-9a-f]{64}$"

package/templates/.gitagent/planner/ORG-POLICY.schema.yaml

@@ -0,0 +1,174 @@
+# ORG-POLICY.schema — JSON Schema (YAML encoding) for organization policy bundles
+# Consumed by gantry (Ajv). ADR-0042. Version label for docs only.
+$schema: https://json-schema.org/draft/2020-12/schema
+$id: https://opengantry.local/schemas/org-policy.v1.json
+title: OpenGantryOrgPolicy
+type: object
+additionalProperties: false
+required:
+  - schema_version
+  - org_id
+  - policy_id
+  - version
+properties:
+  schema_version:
+    type: string
+    const: "1.0.0"
+  org_id:
+    type: string
+    minLength: 1
+  policy_id:
+    type: string
+    minLength: 1
+  version:
+    type: string
+    minLength: 1
+    description: Semver or monotonic label for the bundle (not the CLI).
+  signers:
+    type: array
+    default: []
+    items:
+      type: object
+      additionalProperties: false
+      required:
+        - principal
+      properties:
+        principal:
+          type: string
+          minLength: 1
+          description: SSH or GPG principal allowed to sign the policy commit.
+        kind:
+          type: string
+          enum: [ssh, gpg]
+  mandatory_gates:
+    type: array
+    default: []
+    items:
+      type: object
+      additionalProperties: false
+      required:
+        - id
+        - command
+      properties:
+        id:
+          type: string
+          minLength: 1
+        command:
+          type: string
+          minLength: 1
+        adapter:
+          type: string
+          enum: [generic, eslint, tsc]
+          default: generic
+        success_substring:
+          type: ["string", "null"]
+  banned_imports:
+    type: array
+    default: []
+    items:
+      type: object
+      additionalProperties: false
+      required:
+        - specifier
+      properties:
+        specifier:
+          type: string
+          minLength: 1
+        scope:
+          type: string
+          enum: [changed, all]
+          default: changed
+          description: changed = gantry check-imports on the mission diff; all = whole tree.
+  producers:
+    type: object
+    default: {}
+    additionalProperties:
+      type: string
+      minLength: 1
+    description: >-
+      Map of KPI metric name to producer command. kpi_thresholds[].metric MUST
+      name a key in this object (CLI/schema error otherwise).
+  kpi_thresholds:
+    type: array
+    default: []
+    items:
+      type: object
+      additionalProperties: false
+      required:
+        - metric
+        - op
+        - value
+      properties:
+        metric:
+          type: string
+          minLength: 1
+          description: MUST match a key in producers.
+        op:
+          type: string
+          enum: ["<=", ">=", "==", "<", ">"]
+        value:
+          type: number
+  config_floor:
+    type: object
+    additionalProperties: false
+    properties:
+      planner_signature:
+        type: string
+        enum: [off, warn, require]
+      receipt_signature:
+        type: string
+        enum: [off, warn, require]
+      ledger_signature:
+        type: string
+        enum: [off, warn, require]
+      ledger_mode:
+        type: string
+        enum: [off, local]
+      flight_telemetry:
+        type: object
+        additionalProperties: false
+        properties:
+          body_mode:
+            type: string
+            enum: [hash_only, full]
+      break_glass:
+        type: object
+        additionalProperties: false
+        properties:
+          require_ledger_entry:
+            type: boolean
+  manifest_constraints:
+    type: object
+    additionalProperties: false
+    properties:
+      forbidden_zones_add:
+        type: array
+        items:
+          type: string
+          minLength: 1
+      path_risks_min:
+        type: object
+        additionalProperties:
+          type: string
+          enum: [Tier-1, Tier-2, Tier-3]
+      perimeter_protected_add:
+        type: array
+        items:
+          type: string
+          minLength: 1
+  expected_digests:
+    type: object
+    additionalProperties: false
+    properties:
+      schema_version:
+        type: string
+        const: "0.1.0"
+      manifest_sha256:
+        type: string
+        pattern: "^[0-9a-f]{64}$"
+      target_architecture_sha256:
+        type: ["string", "null"]
+        pattern: "^[0-9a-f]{64}$"
+      config_sha256:
+        type: ["string", "null"]
+        pattern: "^[0-9a-f]{64}$"

package/templates/.gitagent/planner/RULES.md

@@ -24,13 +24,47 @@ Normative keywords **MUST**, **MUST NOT**, and **SHOULD** follow RFC 2119.
 - Access outside effective TMVC requires a context request recorded in `EXECUTOR_LOG.md`.
 - Access into forbidden zones MUST fail closed unless Planner policy explicitly allows it.
 
-## 5. Mission commit indexing
+## 4.5 Interrogation record (legislation gate)
+
+- Computed interrogation findings MUST have an `operator_answer` before legislation.
+- Placeholder or fabricated answers are evidence tampering under §3.
+
+## 5. Rule 4.4 — Planner-driven manifest sync
+
+- Adding, removing, or renaming a skill MUST update `MANIFEST.json` in the same commit set.
+
+## 6. Git-native mission index
 
 - Mission-related commits MUST begin with `[MSN-XXXX]` in the subject line.
 - Keep mission files for `gantry verify` under `.gitagent/missions/`.
 
-## 6. Break-glass (v0.8.0)
+## 6.1 Planner legislation proof
+
+- `gantry verify` requires a Planner stamp: a `[MSN-XXXX]` commit by an allowlisted author that modifies the mission file.
+
+## 6.2 Break-glass (v0.8.0)
 
 - Set `GXT_BYPASS_SECRET` to match `.gitagent/foreman/BYPASS.sha256` (SHA-256 hex of the team secret).
 - Use `gantry verify --break-glass --reason "..."` only in emergencies; push `refs/notes/gxt-bypass` with the branch.
 - Forbidden-zone runtime policy is never bypassed.
+- A bypass MUST also append a `break_glass` ledger entry when `ledger.mode` is `local`.
+
+## 7. Local history (no bloat)
+
+- Bulky traces live under `.gitagent/history/` (git-ignored). Do not commit large trace dumps.
+
+## 8. Organization policy floor (v3.3.0)
+
+- A present `POLICY.pointer.json` is a tighten-only floor: policy MUST NOT loosen local law.
+- `gantry policy pull` is the only network path; doctor and verify read disk/cache only.
+
+## 9. Compliance ledger (v3.3.0)
+
+- `refs/gxt/ledger` is an orphan signed (optional) commit chain of digest-only entries.
+- Append uses CAS `git update-ref` with bounded retries; unsigned entries are checksums, not proofs.
+
+## 10. Cross-repository dependencies (v3.3.0)
+
+- Optional mission `depends_on[]` is resolved from fetched `refs/gxt/deps/<slug>`.
+- Same-org proof uses `repository_hash` + the consumer's `GANTRY_ORG_PEPPER`.
+- `gantry deps fetch` is the only network path.

package/templates/.github/workflows/gxt-attest-ingest.yml

@@ -9,12 +9,18 @@ permissions:
 jobs:
   attest_ingest:
     runs-on: ubuntu-latest
+    env:
+      HAS_ORG_EXPORT: ${{ vars.GANTRY_ORG_ID != '' && secrets.GANTRY_ORG_PEPPER != '' }}
+      HAS_PLANE_INGEST: ${{ vars.PLANE_INGEST_URL != '' && secrets.PLANE_INGEST_TOKEN != '' }}
     steps:
       - uses: actions/checkout@v7
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           fetch-depth: 0
 
+      - name: Install ripgrep
+        run: sudo apt-get update && sudo apt-get install -y ripgrep
+
       - uses: actions/setup-node@v7
         with:
           node-version: 24
@@ -28,13 +34,40 @@ jobs:
           echo "GANTRY_SIGNER_PRINCIPAL_KIND=github_actor" >> "$GITHUB_ENV"
           echo "GANTRY_BRANCH_NAME=${{ github.event.pull_request.head.ref }}" >> "$GITHUB_ENV"
 
+      - name: Resolve ingest configuration
+        run: |
+          if [ "${HAS_ORG_EXPORT}" != "true" ]; then
+            echo "Skipping envelope export: GANTRY_ORG_ID or GANTRY_ORG_PEPPER not configured"
+          fi
+          if [ "${HAS_PLANE_INGEST}" != "true" ]; then
+            echo "Skipping plane ingest: PLANE_INGEST_URL or PLANE_INGEST_TOKEN not configured"
+          fi
+
       - name: Resolve changed mission
         id: mission
         run: |
-          m="$(git diff --name-only --diff-filter=ACMRT \
-                "${{ github.event.pull_request.base.sha }}...HEAD" \
-                -- '.gitagent/missions/*.yaml' | head -n1)"
-          echo "path=$m" >> "$GITHUB_OUTPUT"
+          json="$(node dist/cli/index.js mission changed --base-ref "${{ github.event.pull_request.base.sha }}" --json)" || {
+            echo "$json"
+            exit 1
+          }
+          path="$(printf '%s' "$json" | node -e '
+            let s = "";
+            process.stdin.setEncoding("utf8");
+            process.stdin.on("data", (c) => { s += c; });
+            process.stdin.on("end", () => {
+              const j = JSON.parse(s);
+              if (j.status !== "ok") {
+                console.error(j.message || "mission changed failed");
+                process.exit(1);
+              }
+              process.stdout.write((j.missions && j.missions[0]) || "");
+            });
+          ')"
+          echo "path=$path" >> "$GITHUB_OUTPUT"
+
+      - name: Fetch cross-repo mission dependencies
+        if: steps.mission.outputs.path != ''
+        run: node dist/cli/index.js deps fetch --mission "${{ steps.mission.outputs.path }}"
 
       - name: Verify and export envelope
         id: verify
@@ -45,19 +78,29 @@ jobs:
           GANTRY_ORG_PEPPER: ${{ secrets.GANTRY_ORG_PEPPER }}
           GANTRY_ORG_PEPPER_VERSION: ${{ vars.GANTRY_ORG_PEPPER_VERSION || '1' }}
         run: |
+          extra=()
+          if [ "${HAS_ORG_EXPORT}" != "true" ] || [ -z "${GANTRY_ORG_ID}" ] || [ -z "${GANTRY_ORG_PEPPER}" ]; then
+            echo "Skipping envelope export: GANTRY_ORG_ID or GANTRY_ORG_PEPPER not configured"
+          else
+            extra+=(--export envelope.json)
+          fi
           node dist/cli/index.js verify \
             --mission "${{ steps.mission.outputs.path }}" \
             --audience verifier \
             --ci \
             --base-ref "${{ github.event.pull_request.base.sha }}" \
-            --export envelope.json
+            "${extra[@]}"
 
       - name: Ingest to control plane
-        if: steps.mission.outputs.path != '' && hashFiles('envelope.json') != ''
+        if: steps.mission.outputs.path != '' && hashFiles('envelope.json') != '' && env.HAS_PLANE_INGEST == 'true'
         env:
           PLANE_INGEST_URL: ${{ vars.PLANE_INGEST_URL }}
           PLANE_INGEST_TOKEN: ${{ secrets.PLANE_INGEST_TOKEN }}
         run: |
+          if [ -z "${PLANE_INGEST_URL}" ] || [ -z "${PLANE_INGEST_TOKEN}" ]; then
+            echo "Skipping plane ingest: PLANE_INGEST_URL or PLANE_INGEST_TOKEN not configured"
+            exit 0
+          fi
           code="$(curl -sS -o response.json -w '%{http_code}' \
             -X POST "$PLANE_INGEST_URL/api/v1/attestations/ingest" \
             -H "Authorization: Bearer $PLANE_INGEST_TOKEN" \
@@ -66,6 +109,39 @@ jobs:
             --data-binary @envelope.json)"
           cat response.json
           [ "$code" = "202" ] || { echo "ingest failed: HTTP $code" >&2; exit 1; }
+          request_id="$(sed -n 's/.*"request_id"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/p' response.json)"
+          [ -n "$request_id" ] || { echo "missing request_id in 202 response" >&2; exit 1; }
+          for _ in $(seq 1 120); do
+            status_body="$(curl -sS -H "Authorization: Bearer $PLANE_INGEST_TOKEN" \
+              "$PLANE_INGEST_URL/api/v1/ingest/requests/$request_id")"
+            echo "$status_body"
+            case "$status_body" in
+              *'"status":"chained"'*|*'"status": "chained"'*) exit 0 ;;
+              *'"status":"rejected"'*|*'"status": "rejected"'*)
+                echo "ingest rejected (request_id=$request_id)" >&2
+                exit 1
+                ;;
+            esac
+            sleep 0.5
+          done
+          echo "ingest poll timeout (request_id=$request_id)" >&2
+          exit 1
+
+      - name: Append compliance ledger and push ref
+        if: steps.mission.outputs.path != '' && hashFiles('envelope.json') != '' && env.HAS_ORG_EXPORT == 'true'
+        continue-on-error: true
+        run: |
+          node dist/cli/index.js ledger append --from-envelope envelope.json || true
+          git push origin refs/gxt/ledger || echo "ledger push skipped (ref absent or no permission)"
+
+      - name: Push pre-commit agent events
+        if: steps.mission.outputs.path != ''
+        continue-on-error: true
+        env:
+          PLANE_INGEST_URL: ${{ vars.PLANE_INGEST_URL }}
+          PLANE_INGEST_TOKEN: ${{ secrets.PLANE_INGEST_TOKEN }}
+        run: |
+          node dist/cli/index.js events push --json || true
 
       - name: Propagate verify outcome
         if: steps.verify.outcome == 'failure'

package/templates/.github/workflows/gxt-validate.yml

@@ -162,6 +162,39 @@ jobs:
       - name: Build gantry
         run: npm run build
 
+      - name: Fetch cross-repo mission dependencies
+        env:
+          BASE_SHA: ${{ github.event.pull_request.base.sha }}
+          HEAD_SHA: ${{ github.event.pull_request.head.sha }}
+        run: |
+          json="$(node dist/cli/index.js mission changed --base-ref "$BASE_SHA" --head-ref "$HEAD_SHA" --json)" || {
+            echo "$json"
+            exit 1
+          }
+          mapfile -t missions < <(
+            printf '%s' "$json" | node -e '
+              let s = "";
+              process.stdin.setEncoding("utf8");
+              process.stdin.on("data", (c) => { s += c; });
+              process.stdin.on("end", () => {
+                const j = JSON.parse(s);
+                if (j.status !== "ok") process.exit(1);
+                for (const m of j.missions || []) console.log(m);
+              });
+            '
+          )
+          if [ ${#missions[@]} -eq 1 ] && [ -z "${missions[0]:-}" ]; then
+            missions=()
+          fi
+          if [ ${#missions[@]} -eq 0 ]; then
+            echo "deps fetch: no PR-changed missions"
+            exit 0
+          fi
+          for m in "${missions[@]}"; do
+            [ -n "$m" ] || continue
+            node dist/cli/index.js deps fetch --mission "$m"
+          done
+
       - name: Full verify on PR-changed missions
         env:
           BASE_SHA: ${{ github.event.pull_request.base.sha }}

package/templates/.gitignore.gxt

@@ -2,6 +2,7 @@
 .gitagent/foreman/PLANNER.allowlist.local
 .gitagent/foreman/ORG.export.local
 .gitagent/history/
+.gitagent/history/policy/
 .gitagent/history/credentials/
 .gitagent/history/.ignored-last-error.json
 .gitagent/history/.draft-token-replay.json

package/templates/integrations/asset-catalog.json

@@ -14,6 +14,7 @@
     { "targetPath": ".gitagent/config.json", "mode": "scaffold_only", "tags": ["core"] },
     { "targetPath": ".gitagent/foreman/BYPASS.sha256", "mode": "scaffold_only", "tags": ["core"] },
     { "targetPath": ".gitagent/foreman/MANIFEST.json", "mode": "scaffold_only", "tags": ["core"] },
+    { "targetPath": ".gitagent/foreman/POLICY.pointer.json", "mode": "scaffold_only", "tags": ["core"] },
     { "targetPath": ".gitagent/foreman/SUBSTRATE.version.json", "mode": "scaffold_only", "tags": ["core"] },
     { "targetPath": ".gitagent/missions/README.md", "mode": "scaffold_only", "tags": ["core"] },
     { "targetPath": ".gitagent/planner/ARCHITECTURE-ACCESS.md", "mode": "scaffold_only", "tags": ["core"] },
@@ -22,6 +23,7 @@
     { "targetPath": ".gitagent/planner/KPI-REPORT.schema.yaml", "mode": "managed_strict", "tags": ["core"] },
     { "targetPath": ".gitagent/planner/MISSION-ARCHITECT.md", "mode": "scaffold_only", "tags": ["core"] },
     { "targetPath": ".gitagent/planner/MISSION.schema.yaml", "mode": "managed_strict", "tags": ["core"] },
+    { "targetPath": ".gitagent/planner/ORG-POLICY.schema.yaml", "mode": "managed_strict", "tags": ["core"] },
     { "targetPath": ".gitagent/planner/RULES.md", "mode": "scaffold_only", "tags": ["core"] },
     { "targetPath": ".githooks/post-checkout", "mode": "managed_strict", "executable": true, "tags": ["hooks"] },
     { "targetPath": ".githooks/pre-commit", "mode": "managed_strict", "executable": true, "tags": ["hooks"] },

package/templates/integrations/compatibility.json

@@ -1,6 +1,6 @@
 {
   "schema_version": "1",
-  "opengantry_version": "3.2.3",
+  "opengantry_version": "3.3.0",
   "asset_catalog": "integrations/asset-catalog.json",
   "integrations": {
     "cursor": {

package/templates/scripts/validate-mcp-dogfood.mjs

@@ -5,6 +5,7 @@ import { handleDraftLegislation } from "../dist/cli/lib/mcp-draft-legislation.js
 import { handleExecuteLegislation } from "../dist/cli/lib/mcp-execute-legislation.js";
 import { handleCheckSignature } from "../dist/cli/lib/mcp-check-signature.js";
 import { handlePinMission, handleRuntimeEnv } from "../dist/cli/lib/mcp-runtime.js";
+import { handleDoctor } from "../dist/cli/lib/mcp-doctor.js";
 
 const dest = process.env.GXT_DOGFOOD_TMP;
 if (!dest) throw new Error("GXT_DOGFOOD_TMP unset");
@@ -50,4 +51,8 @@ if (pinned.status !== "pinned") throw new Error("pin failed");
 const env = handleRuntimeEnv(executed.mission_file_path);
 if (env.status !== "ok") throw new Error(`runtime env failed: ${JSON.stringify(env)}`);
 
+const doctor = handleDoctor({});
+if (doctor.status === "error") throw new Error(`doctor failed: ${JSON.stringify(doctor)}`);
+if (!Array.isArray(doctor.lines)) throw new Error("doctor lines missing");
+
 console.log("OK: MCP dogfood flow passed");

package/templates/scripts/verify-pr-missions.sh

@@ -42,19 +42,6 @@ else
   exit 2
 fi
 
-mapfile -t UNIQUE_MSNS < <(
-  git log --no-merges --format=%s "${BASE_SHA}..${HEAD_SHA}" \
-    | grep -Eo '\[MSN-[0-9]{4}\]' | sort -u || true
-)
-
-if [[ ${#UNIQUE_MSNS[@]} -gt 1 ]]; then
-  echo "verify-pr-missions FAILED: mission contamination detected" >&2
-  echo "  This PR contains commits from multiple missions:" >&2
-  printf '    %s\n' "${UNIQUE_MSNS[@]}" >&2
-  echo "  OpenGantry requires strict blast-radius isolation. Rebase this branch onto the integration branch (e.g. origin/main)." >&2
-  exit 1
-fi
-
 if [[ -f dist/cli/index.js ]]; then
   GANTRY=(node dist/cli/index.js)
 elif command -v gantry >/dev/null 2>&1; then
@@ -64,14 +51,6 @@ else
   exit 1
 fi
 
-is_verifiable_mission() {
-  local p="$1"
-  [[ "$p" == "${MISSIONS_PREFIX}"* ]] || return 1
-  [[ "$p" =~ \.(ya?ml|md)$ ]] || return 1
-  [[ "$(basename "$p")" == "README.md" ]] && return 1
-  return 0
-}
-
 is_msn_enforced_path() {
   local p="$1"
   local prefix
@@ -99,14 +78,28 @@ for f in "${DIFF_FILES[@]}"; do
   fi
 done
 
+changed_json="$("${GANTRY[@]}" mission changed --base-ref "$BASE_SHA" --head-ref "$HEAD_SHA" --json)" || {
+  printf '%s\n' "$changed_json" >&2
+  exit 1
+}
 mapfile -t CHANGED_MISSIONS < <(
-  for f in "${DIFF_FILES[@]}"; do
-    [[ -n "$f" ]] || continue
-    if is_verifiable_mission "$f" && [[ -f "$f" ]]; then
-      echo "$f"
-    fi
-  done | sort -u
+  printf '%s' "$changed_json" | node -e '
+    let s = "";
+    process.stdin.setEncoding("utf8");
+    process.stdin.on("data", (c) => { s += c; });
+    process.stdin.on("end", () => {
+      const j = JSON.parse(s);
+      if (j.status !== "ok") {
+        console.error(j.message || "mission changed failed");
+        process.exit(1);
+      }
+      for (const m of j.missions || []) console.log(m);
+    });
+  '
 )
+if [[ ${#CHANGED_MISSIONS[@]} -eq 1 && -z "${CHANGED_MISSIONS[0]:-}" ]]; then
+  CHANGED_MISSIONS=()
+fi
 
 if [[ "$needs_mission" -eq 1 && ${#CHANGED_MISSIONS[@]} -eq 0 ]]; then
   if eval_out="$(node "$GXT_MANIFEST_LIB" eval-range "$ROOT" "$BASE_SHA" "$HEAD_SHA" 2>&1)"; then
@@ -125,20 +118,6 @@ if [[ ${#CHANGED_MISSIONS[@]} -eq 0 ]]; then
   exit 0
 fi
 
-if [[ ${#UNIQUE_MSNS[@]} -eq 1 ]]; then
-  purity_msn="${UNIQUE_MSNS[0]}"
-  purity_msn="${purity_msn#[}"
-  purity_msn="${purity_msn%]}"
-  for mission in "${CHANGED_MISSIONS[@]}"; do
-    base="$(basename "$mission")"
-    if [[ "$base" != "${purity_msn}."* ]]; then
-      echo "verify-pr-missions FAILED: changed mission file does not match commit MSN tag" >&2
-      echo "  commits: [${purity_msn}]  mission file: ${mission}" >&2
-      exit 1
-    fi
-  done
-fi
-
 for mission in "${CHANGED_MISSIONS[@]}"; do
   echo "verify-pr-missions: gantry verify --mission ${mission}" >&2
   "${GANTRY[@]}" verify --mission "$mission" --audience verifier || exit 1