WCNWeb3 Capital Network
AGENT GATEWAY

External agents enter through contracts.

This local cockpit shows sandbox agents, OAuth boundaries, webhook dry-runs, SDK manifests, quarantine records, and the no-production-access line.

Gateway APIContracts APIRuntime bridge APIProduction controls APIClosure handoff APIModule cockpit
Agents
0
Contracts
0
OAuth
0
Webhooks
0
SDK manifests
0
Webhook dry-runs
0
Quarantine
0
Pending Human Gate
0
Local controls ready
8
Production bound
0
External bindings required
8
Governed surfaces
8
Allowed local bridges
0
Blocked bridge decisions
6
Runtime auth bound
6
Product gate controls
6
Handoff items
1
Missing production bindings
8
Production connector ready
false
Closure evidence stored
false
Local gateway store
.next/cache/wcn-agent-os/interoperability-gateway.json
No production connector
oauth=false · network=false · access=false
Production gateway ready
productionInteroperabilityReady=false
Production false boundary
oauth=false · apiKey=false · webhook=false · sdk=false · customerSecret=false · rateLimit=false · externalWrite=false · sideEffect=false
Runtime authorization bridge
allowedLocalBridge=0 · customerSecretLoaded=false · realNetworkDelivery=false · externalProviderCallExecuted=false · productionActionExecuted=false
Production interoperability closure handoff
productionCompletionReady=false · productionReadyClaimAllowed=false · productionAccessGranted=false · productionOauthBound=false · productionApiKeyIssued=false · realNetworkDelivery=false

Production interoperability closure handoff

This local takeover package combines Gateway production controls, runtime bridge decisions, connector state, missing external bindings, and the no-production-access boundary.

wcn-production-interoperability-closure-handoff-gateway-connector · production-interoperability-controls

Production interoperability controls

productionConnectorReady=false
Missing production bindings
8
completionMatrixBound=false
Blocking reasons
  • 8 production interoperability binding groups are missing.
  • 6 Gateway runtime bridge decisions are still blocked in the local sample set.
  • Production OAuth provider, API key custody, signed webhook worker, SDK publication, customer-secret custody, rate-limit enforcement, external-write promotion, and connector audit export evidence are not attached.
  • This package is not bound to the global closure matrix; Human Gate must decide whether production-interoperability-controls becomes a production completion gate.
Production false boundary
  • productionCompletionReady=false
  • productionReadyClaimAllowed=false
  • productionAccessGranted=false
  • customerSecretLoaded=false

Runtime authorization bridge

External agents can only broker a local runtime dry-run after Gateway identity, scope, connector contract, Product API Access Gate, and Runtime API Authorization all pass.

WCN-GATEWAY-AGENT-0001 · module_status:read

Bridge request: WCN-GATEWAY-RUNTIME-BRIDGE-001

blocked_gateway_agent_missing
Runtime status
allowed_local_dry_run
Blocking reasons
  • Gateway sandbox agent WCN-GATEWAY-AGENT-0001 was not found.
  • WCN-GATEWAY-AGENT-0001 is not approved for module_status:read.
Satisfied controls
  • connectorContract.optionalForLocalSandbox=true
  • runtimeDecision.allowedLocalDryRun=true
WCN-GATEWAY-AGENT-0001 · quarantine:write

Bridge request: WCN-GATEWAY-RUNTIME-BRIDGE-002

blocked_gateway_agent_missing
Runtime status
allowed_local_dry_run
Blocking reasons
  • Gateway sandbox agent WCN-GATEWAY-AGENT-0001 was not found.
  • WCN-GATEWAY-AGENT-0001 is not approved for quarantine:write.
Satisfied controls
  • connectorContract.optionalForLocalSandbox=true
  • runtimeDecision.allowedLocalDryRun=true
WCN-GATEWAY-AGENT-0001 · customer_provider:read

Bridge request: WCN-GATEWAY-RUNTIME-BRIDGE-003

blocked_gateway_agent_missing
Runtime status
blocked_missing_consent
Blocking reasons
  • Gateway sandbox agent WCN-GATEWAY-AGENT-0001 was not found.
  • customer_provider:read is not an allowed local Gateway sandbox scope.
  • runtime: User consent/work order is missing.
Satisfied controls
  • connectorContract.optionalForLocalSandbox=true
WCN-GATEWAY-AGENT-0001 · module_status:read

Bridge request: WCN-GATEWAY-RUNTIME-BRIDGE-004

blocked_gateway_agent_missing
Runtime status
blocked_missing_budget
Blocking reasons
  • Gateway sandbox agent WCN-GATEWAY-AGENT-0001 was not found.
  • WCN-GATEWAY-AGENT-0001 is not approved for module_status:read.
  • runtime: Approved budget is missing for paid or external tool use.
Satisfied controls
  • connectorContract.optionalForLocalSandbox=true
WCN-GATEWAY-AGENT-0001 · module_status:read

Bridge request: WCN-GATEWAY-RUNTIME-BRIDGE-005

blocked_gateway_agent_missing
Runtime status
allowed_local_dry_run
Blocking reasons
  • Gateway sandbox agent WCN-GATEWAY-AGENT-0001 was not found.
  • WCN-GATEWAY-AGENT-0001 is not approved for module_status:read.
  • Production connector use was requested; the local bridge cannot grant it.
Satisfied controls
  • connectorContract.optionalForLocalSandbox=true
  • runtimeDecision.allowedLocalDryRun=true
WCN-GATEWAY-AGENT-0001 · quarantine:write

Bridge request: WCN-GATEWAY-RUNTIME-BRIDGE-006

blocked_gateway_agent_missing
Runtime status
blocked_external_side_effect
Blocking reasons
  • Gateway sandbox agent WCN-GATEWAY-AGENT-0001 was not found.
  • WCN-GATEWAY-AGENT-0001 is not approved for quarantine:write.
  • runtime: Real external side effects remain outside local-only runtime authorization.
Satisfied controls
  • connectorContract.optionalForLocalSandbox=true

Production interoperability controls

These controls define what must be bound before WCN can safely expose production OAuth, API keys, signed webhooks, SDKs, customer-owned API keys, rate limits, external write review, and connector audit export.

production_oauth_provider · 04-agent-interoperability-gateway

Production OAuth provider binding

External Agent -> OAuth Provider

Not bound to production
Local signals
  • contract.authMode=oauth_authorization_code_pkce
  • contract.productionAccessGranted=false
  • contract.source.productionOAuthEnabled=false
Required production binding
  • Bind OAuth providers to authenticated organizations, redirect URIs, PKCE, consent screens, and revocation.
  • Issue production client credentials only from a secret manager with rotation and audit evidence.
  • Block external agents when the OAuth provider is missing, revoked, unreviewed, or outside approved scopes.
Validation
  • npm run check:agent-os-gateway
  • GET /api/agent-os/interoperability-gateway/contracts
api_key_custody · auth-rbac-security

Production API key custody

Customer / Partner -> ApiKey Custody

Not bound to production
Local signals
  • ApiKey route exists
  • requestedCredentialTypes
  • redactedSecret
  • productionApiKeyIssued=false
Required production binding
  • Generate, hash, rotate, revoke, and scope production API keys through authenticated custody rules.
  • Record owner, organization, lastUsedAt, scope, rate plan, expiration, and revocation authority.
  • Never expose raw customer API keys to runtime agents, logs, public pages, or unreviewed exports.
Validation
  • npm run check:agent-os-gateway
  • GET /api/apikeys
signed_webhook_delivery · 04-agent-interoperability-gateway

Signed webhook delivery worker

WCN Event -> Partner Webhook Endpoint

Not bound to production
Local signals
  • webhook.dryRun=true
  • receipt.signaturePreview
  • receipt.realNetworkDelivery=false
Required production binding
  • Deliver production webhooks through a worker that signs payloads, retries idempotently, and records delivery state.
  • Require endpoint ownership verification, event allowlists, replay protection, timeout policy, and DLQ routing.
  • Prevent real network delivery when the connector contract is inactive, unreviewed, over-scoped, or paused.
Validation
  • npm run check:agent-os-gateway
  • POST /api/agent-os/interoperability-gateway/webhook-dry-run
sdk_distribution · developer-platform

SDK distribution control

SDK Manifest -> Public SDK Package

Not bound to production
Local signals
  • sdkManifest.allowedOperations
  • sdkManifest.sandboxOnly=true
  • source.sdkPublished=false
Required production binding
  • Publish SDKs from versioned, signed packages with changelog, compatibility policy, and deprecation rules.
  • Expose only gateway-safe operations such as quarantine write, contract read, module status, and dry-run.
  • Require Human Gate before moving an SDK manifest from local sandbox to public production distribution.
Validation
  • npm run check:agent-os-gateway
  • GET /api/agent-os/interoperability-gateway
customer_api_key_boundary · 04-agent-interoperability-gateway

Customer API key boundary

User-Owned Model/API Key -> WCN Agent Tool

Not bound to production
Local signals
  • MVP usesOwnApi enters Human Gate
  • source.customerSecretLoaded=false
  • externalSideEffectExecuted=false
Required production binding
  • Store user-owned API keys in encrypted secret storage controlled by the customer organization.
  • Bind usage to consent, model/provider scope, spending limits, audit export, and deletion policy.
  • Prevent WCN runtime agents from reading raw secrets or using customer keys outside approved tasks.
Validation
  • npm run check:agent-os-gateway
  • npm run check:agent-os-production-readiness
rate_limit_abuse_control · platform-reliability-kernel

Rate limit and abuse control

Gateway Request -> Rate Limit / Abuse Decision

Not bound to production
Local signals
  • approvedScopes
  • deniedScopes
  • quarantine.reason
  • productionRateLimitEnforced=false
Required production binding
  • Enforce rate limits by organization, credential, scope, endpoint, risk level, and abuse history.
  • Route suspicious calls to deny, quarantine, revoke, or Human Gate review with preserved evidence.
  • Publish abuse-control metrics without leaking sensitive request payloads or customer secrets.
Validation
  • npm run check:agent-os-gateway
  • npm run check:agent-os-reliability
external_write_review · 08-human-gate-governance

External write review gate

External Draft / Quarantine -> Product Fact

Not bound to production
Local signals
  • quarantineRecord.reviewStatus
  • review.humanGateVerified
  • source.externalWritePromoted=false
Required production binding
  • Keep external writes in quarantine until authenticated reviewers approve the affected product surface.
  • Prevent external agents, customers, or partner systems from self-approving proof, settlement, governance, or public claims.
  • Record reviewer identity, conflict checks, rollback path, and affected records before promotion.
Validation
  • npm run check:agent-os-gateway
  • npm run check:agent-os-governance
connector_audit_export · 04-agent-interoperability-gateway

Connector audit export

Gateway Request / Contract / Delivery -> Audit Export

Not bound to production
Local signals
  • requestId
  • contractId
  • externalAgentId
  • externalSideEffectExecuted=false
Required production binding
  • Export connector decisions, credential changes, webhook receipts, quarantine reviews, and deny events.
  • Redact secrets and payloads while preserving hashes, trace ids, reviewer ids, timestamps, and affected systems.
  • Make audit exports available to governance and compliance without granting production connector control.
Validation
  • npm run check:agent-os-gateway
  • GET /api/agent-os/interoperability-gateway/production-interoperability-controls

Connector contracts

No connector contracts recorded yet.

Recent quarantine records

No quarantine records recorded yet.