Gate Lite Demo · SYSTEM CHANGE · HIGH RISK

The Shell Command Gate

A command request is not terminal access. This gate proves how one exact command can be reviewed, hash-bound, executed in an isolated mock sandbox, and revoked without exposing a real host.

All Gate demos Action-control overview Scope governed operator actions

01 · Declared intent

An operator agent requests one system command.

{
  "actor": "agent:solyn",
  "action": "run_command",
  "target": "sandbox:demo-ops",
  "command": "systemctl restart example-worker",
  "reason": "recover a synthetic degraded worker",
  "riskLevel": "high"
}

The request names the host class, command purpose, expected effect, and risk before policy evaluates it.