{
  "rows": [
    {
      "id": "x2-guard-gate-guardrsi",
      "canonical": "guardrsi (guard-verdict-RSI fold)",
      "family": "guard-gate",
      "kind": "subsystem",
      "definition": "The internal/guardrsi package that folds a guarded session's hash-chained decision journal and finds the dominant honesty-hole bucket (WorstBucket) to drive the guard-verdict RSI loop.",
      "distinction": "It is the JOURNAL-FOLD measurement layer over a guard's own verdicts, NOT the guard kernel that emits them and NOT the shipgate that promotes a code change.",
      "distinct_from": ["guard (fak guard kernel)", "shipgate (RSI promotion gate)"],
      "aliases": ["guardtrace", "guardtest"],
      "grounding": "guardrsi",
      "grounding_kind": "symbol",
      "glossary_anchor": "",
      "parent": "",
      "verdict": "defined",
      "gaps": []
    },
    {
      "id": "x2-guard-gate-guardroute",
      "canonical": "guardroute (RSI route decision)",
      "family": "guard-gate",
      "kind": "subsystem",
      "definition": "The internal/guardroute bridge that turns guardrsi's worst journal bucket into a routed, idempotent, escalating finding (a queue row and, for a real honesty-hole, a deduped GitHub issue), closing the guard RSI loop.",
      "distinction": "It is the DECISION/ROUTING layer that materializes a fold into a sink, NOT guardrsi (the fold that produces the bucket) and NOT the guard kernel itself.",
      "distinct_from": ["guard (fak guard kernel)", "gate (decision point)"],
      "aliases": [],
      "grounding": "guardroute",
      "grounding_kind": "symbol",
      "glossary_anchor": "",
      "parent": "",
      "verdict": "defined",
      "gaps": []
    },
    {
      "id": "x2-guard-gate-guardcomplaint",
      "canonical": "guardcomplaint (agent appeal channel)",
      "family": "guard-gate",
      "kind": "subsystem",
      "definition": "The internal/guardcomplaint package behind `fak complain`: the SUBJECTIVE appeal channel where an agent reports a false-positive DENY, the complement of guardroute's objective journal-fold routing.",
      "distinction": "It is the agent-initiated APPEAL/complaint layer (a felt false positive), NOT guardroute (the automatic objective routing) and NOT the guard kernel's own refusal.",
      "distinct_from": ["guardroute (RSI route decision)", "guard (fak guard kernel)"],
      "aliases": [],
      "grounding": "guardcomplaint",
      "grounding_kind": "symbol",
      "glossary_anchor": "",
      "parent": "",
      "verdict": "defined",
      "gaps": []
    },
    {
      "id": "x2-guard-gate-guarddemo",
      "canonical": "guarddemo (safety-floor demo)",
      "family": "guard-gate",
      "kind": "subsystem",
      "definition": "The cmd/guarddemo command: the live on-box demo that replays the same attack trace twice (with and without fak) to show the SAFETY FLOOR refusing destructive/exfiltration tool calls.",
      "distinction": "It is a DEMO harness that exhibits the floor's behavior, NOT the guard kernel that enforces it and NOT guardtrace (the hermetic test/replay harness).",
      "distinct_from": ["guard (fak guard kernel)", "gate (decision point)"],
      "aliases": [],
      "grounding": "guarddemo",
      "grounding_kind": "path",
      "glossary_anchor": "",
      "parent": "",
      "verdict": "defined",
      "gaps": []
    },
    {
      "id": "x2-guard-gate-stophook",
      "canonical": "guardStopHook (deny-all continue hook)",
      "family": "guard-gate",
      "kind": "symbol",
      "definition": "The cmd/fak guard Stop-hook half of the deny-all false-stop fix: when the floor refused EVERY tool call in a turn (reported as end_turn), it auto-RESUMES the agent, bounded by warn/final consecutive-continue limits.",
      "distinction": "It is a Claude-Code STOP-hook actuator that recovers from a floor-induced false stop, NOT a tool-call adjudication gate and NOT the PreCompact mode hook.",
      "distinct_from": ["guard (fak guard kernel)", "gate (decision point)"],
      "aliases": [],
      "grounding": "guardstophook",
      "grounding_kind": "symbol",
      "glossary_anchor": "",
      "parent": "",
      "verdict": "defined",
      "gaps": []
    },
    {
      "id": "x2-guard-gate-mcpstatusaudit",
      "canonical": "guardMcpStatusAudit (guard MCP-status audit)",
      "family": "guard-gate",
      "kind": "symbol",
      "definition": "The guard_mcp_status_audit make-hygiene checker (schema fak-guard-mcp-status-audit/1) that audits whether the guard's default MCP blockers are in place and surfaces them in the TUI guard pane.",
      "distinction": "It is a STATUS/CONFIG audit of the guard's MCP posture, NOT a runtime adjudication gate and NOT guardtrace (the trace-replay harness).",
      "distinct_from": ["guard (fak guard kernel)", "gate (decision point)"],
      "aliases": [],
      "grounding": "guardmcpstatusaudit",
      "grounding_kind": "symbol",
      "glossary_anchor": "",
      "parent": "",
      "verdict": "defined",
      "gaps": []
    },
    {
      "id": "x2-guard-gate-tuiguardreport",
      "canonical": "tuiGuardReport (TUI guard pane model)",
      "family": "guard-gate",
      "kind": "symbol",
      "definition": "The cmd/fak TUI data model for the guard pane: tuiGuardReport (built by buildTUIGuardReport from artifacts loaded by loadTUIGuard) holds the counts, rows, and sources rendered as the guard overview card.",
      "distinction": "It is the read-only RENDER/REPORT model that visualizes guard journal artifacts in the TUI, NOT the guard kernel that produces them and NOT any adjudication gate.",
      "distinct_from": ["guard (fak guard kernel)", "gate (decision point)"],
      "aliases": ["buildtuiguardreport", "loadtuiguard", "tuiguardartifact", "tuiguardrow", "tuiguardsource"],
      "grounding": "tuiguardreport",
      "grounding_kind": "symbol",
      "glossary_anchor": "",
      "parent": "",
      "verdict": "defined",
      "gaps": []
    },
    {
      "id": "x2-guard-gate-cmdguard",
      "canonical": "cmdGuard (fak guard entry point)",
      "family": "guard-gate",
      "kind": "symbol",
      "definition": "The cmd/fak entry function for `fak guard`: it resolves the upstream wire, stands up the gateway, builds the child command (buildGuardChild) with the injected base-URL env (guardInjectedEnv), and execs the wrapped agent through the kernel.",
      "distinction": "It is the CLI LAUNCHER that wires up a guarded session, NOT the in-process adjudication kernel concept itself and NOT any single decision gate.",
      "distinct_from": ["guard (fak guard kernel)", "gate (decision point)"],
      "aliases": ["buildguardchild", "guardinjectedenv"],
      "grounding": "cmdguard",
      "grounding_kind": "symbol",
      "glossary_anchor": "",
      "parent": "",
      "verdict": "defined",
      "gaps": []
    },
    {
      "id": "x2-guard-gate-guardprovider",
      "canonical": "guardProvider (upstream wire resolver)",
      "family": "guard-gate",
      "kind": "symbol",
      "definition": "The cmd/fak guard provider-resolution family: GuardProvider/resolveGuardProvider/guardDetectProvider pick the upstream API wire (anthropic/openai/...) for a guarded session, inferring it from the wrapped agent's base name (guardAgentBaseName).",
      "distinction": "It selects WHICH upstream provider the guard proxies, NOT a tool-call adjudication gate and NOT the base-URL string those providers map to.",
      "distinct_from": ["guard (fak guard kernel)", "gate (decision point)"],
      "aliases": ["resolveguardprovider", "guarddetectprovider", "guardagentbasename"],
      "grounding": "guardprovider",
      "grounding_kind": "symbol",
      "glossary_anchor": "",
      "parent": "",
      "verdict": "defined",
      "gaps": []
    },
    {
      "id": "x2-guard-gate-baseurl",
      "canonical": "guardDefaultBaseURL (provider base-URL map)",
      "family": "guard-gate",
      "kind": "config",
      "definition": "The cmd/fak guard base-URL config helpers: guardDefaultBaseURL maps a provider to its public API base, guardOpenAIV1Base appends the /v1 the OpenAI-compatible wire expects, and fleetDogfoodGuardBaseURL is the fleet dogfood default.",
      "distinction": "These are the upstream BASE-URL strings the guard proxies to, NOT the provider-resolution logic that picks the provider and NOT an adjudication gate.",
      "distinct_from": ["guard (fak guard kernel)", "gate (decision point)"],
      "aliases": ["guardopenaiv1base", "fleetdogfoodguardbaseurl"],
      "grounding": "guarddefaultbaseurl",
      "grounding_kind": "symbol",
      "glossary_anchor": "",
      "parent": "",
      "verdict": "defined",
      "gaps": []
    },
    {
      "id": "x2-guard-gate-launchcfg",
      "canonical": "guardedLaunchCommand (guarded-launch wiring)",
      "family": "guard-gate",
      "kind": "config",
      "definition": "The dispatch/guard launch + session config helpers: GuardedLaunchCommand fronts a worker command with `fak guard`, guardEnabled gates whether to do so, guardEnvValue/guardedGlobs/guardLocalModelDecision/guardTimeoutFloors/guardWaitHealthy supply the session's env, scope, model and readiness wiring.",
      "distinction": "These are the SESSION-SETUP knobs that decide whether and how a child runs under the guard, NOT the adjudication gates inside it and NOT the provider/base-URL resolvers.",
      "distinct_from": ["guard (fak guard kernel)", "gate (decision point)"],
      "aliases": ["guardenabled", "guardenvvalue", "guardedglobs", "guardlocalmodeldecision", "guardtimeoutfloors", "guardwaithealthy"],
      "grounding": "guardedlaunchcommand",
      "grounding_kind": "symbol",
      "glossary_anchor": "",
      "parent": "",
      "verdict": "defined",
      "gaps": []
    },
    {
      "id": "x2-guard-gate-auditpath",
      "canonical": "guardDefaultAuditPath (decision-journal path)",
      "family": "guard-gate",
      "kind": "config",
      "definition": "The cmd/fak guardDefaultAuditPath helper: the per-user default filesystem path where `fak guard` writes its durable hash-chained decision journal when FAK_AUDIT_JOURNAL is unset.",
      "distinction": "It is the JOURNAL OUTPUT PATH config for the guard, NOT the guard kernel itself and NOT a decision gate.",
      "distinct_from": ["guard (fak guard kernel)", "gate (decision point)"],
      "aliases": [],
      "grounding": "guarddefaultauditpath",
      "grounding_kind": "symbol",
      "glossary_anchor": "",
      "parent": "",
      "verdict": "defined",
      "gaps": []
    },
    {
      "id": "x2-guard-gate-precompactmode",
      "canonical": "guardPreCompactMode (PreCompact hook mode)",
      "family": "guard-gate",
      "kind": "config",
      "definition": "The off|shadow|enforce mode constants for `fak guard`'s Claude-Code PreCompact / Stop hooks: guardPreCompactModeOff disables, guardPreCompactModeShadow logs the would-block while exiting 0, and guardPreCompactModeEnforce returns the blocking exit code.",
      "distinction": "It is the THREE-WAY MODE config for the hook actuators (the compaction/stop posture), NOT a tool-call adjudication gate and NOT the guard kernel.",
      "distinct_from": ["guard (fak guard kernel)", "gate (decision point)"],
      "aliases": ["guardprecompactmodeoff", "guardprecompactmodeshadow"],
      "grounding": "guardprecompactmodeenforce",
      "grounding_kind": "symbol",
      "glossary_anchor": "",
      "parent": "",
      "verdict": "defined",
      "gaps": []
    },
    {
      "id": "x2-guard-gate-codexconfig",
      "canonical": "installGuardCodexConfig (codex routing rewrite)",
      "family": "guard-gate",
      "kind": "symbol",
      "definition": "The cmd/fak installGuardCodexConfig function: the only thing that puts the kernel in front of Codex, rewriting a `codex` child command with Codex-specific `-c` flags so it routes through the guard gateway.",
      "distinction": "It is the Codex-only COMMAND REWRITE that wires Codex to the gateway, NOT the generic child builder and NOT an adjudication gate.",
      "distinct_from": ["guard (fak guard kernel)", "gate (decision point)"],
      "aliases": [],
      "grounding": "installguardcodexconfig",
      "grounding_kind": "symbol",
      "glossary_anchor": "",
      "parent": "",
      "verdict": "defined",
      "gaps": []
    },
    {
      "id": "x2-guard-gate-guardrefusals",
      "canonical": "GuardRefusals (refusal-count signal)",
      "family": "guard-gate",
      "kind": "metric",
      "definition": "The sessionobs.Signals counter that tallies how many times the guard refused a tool call in a session (deny + kernel-deny + per-turn floor refusals), excluding quarantines.",
      "distinction": "It is a per-session COUNT of refusals (a measurement), NOT the guard mechanism that refuses and NOT a gate that decides.",
      "distinct_from": ["guard (fak guard kernel)", "gate (decision point)"],
      "aliases": [],
      "grounding": "guardrefusals",
      "grounding_kind": "metric",
      "glossary_anchor": "",
      "parent": "",
      "verdict": "defined",
      "gaps": []
    },
    {
      "id": "x2-guard-gate-checkgate",
      "canonical": "CheckGate (report CI-gate method)",
      "family": "guard-gate",
      "kind": "symbol",
      "definition": "The report-level CI gate on cadencereport/dojo/gardenbundle reports: CheckGate(report) returns an exit code plus message, and WithGate folds that gate result (gateExit / gateMessage) back into the emitted report.",
      "distinction": "It is a REPORT-SUMMARY CI-pass/fail gate over an already-computed report, NOT a kernel adjudication gate on a tool call and NOT a result admitter.",
      "distinct_from": ["gate (decision point)", "ResultAdmitter (post-call gate)"],
      "aliases": ["withgate", "newwithgate", "gateexit", "gatemessage"],
      "grounding": "checkgate",
      "grounding_kind": "symbol",
      "glossary_anchor": "",
      "parent": "",
      "verdict": "defined",
      "gaps": []
    },
    {
      "id": "x2-guard-gate-gatesend",
      "canonical": "gateSend (A2A capability floor)",
      "family": "guard-gate",
      "kind": "symbol",
      "definition": "The internal/a2achan capability-floor functions gateSend (send-time) and gateRecv (recv-time): the one fail-closed source of truth the agent-to-agent Bus and replay call to admit or deny a channel message by capability.",
      "distinction": "It is the A2A-MESSAGE capability floor (send/recv on a channel), NOT a tool-call adjudication gate and NOT the report CI gate.",
      "distinct_from": ["gate (decision point)", "guardrail (safety boundary)"],
      "aliases": ["gaterecv"],
      "grounding": "gatesend",
      "grounding_kind": "symbol",
      "glossary_anchor": "",
      "parent": "",
      "verdict": "defined",
      "gaps": []
    },
    {
      "id": "x2-guard-gate-gatetokenwrite",
      "canonical": "GateTokenWrite (account twin-guard)",
      "family": "guard-gate",
      "kind": "symbol",
      "definition": "The internal/accounts twin-guard GateTokenWrite: it twin-checks before writing an account's .oauth-token so a credential is never smeared across two distinct accounts in one seat directory.",
      "distinction": "It is a CREDENTIAL-WRITE admission check (prevent cross-account token smear), NOT a tool-call adjudication gate and NOT the A2A message floor.",
      "distinct_from": ["gate (decision point)", "guardrail (safety boundary)"],
      "aliases": [],
      "grounding": "gatetokenwrite",
      "grounding_kind": "symbol",
      "glossary_anchor": "",
      "parent": "",
      "verdict": "defined",
      "gaps": []
    },
    {
      "id": "x2-guard-gate-cachevaluegate",
      "canonical": "MinGateTurns (cache-value gate threshold)",
      "family": "guard-gate",
      "kind": "metric",
      "definition": "The cachevalueledger cache-value gate accounting: MinGateTurns is the minimum number of multi-turn turns required before the regression gate enforces, while GatePromptTokens / GateReusedTokens are the prompt/reused token tallies that gate folds over.",
      "distinction": "These are the THRESHOLD and TOKEN TALLIES for the cache-value regression gate (a metric guard), NOT a tool-call adjudication gate and NOT the report CI gate.",
      "distinct_from": ["gate (decision point)", "shipgate (RSI promotion gate)"],
      "aliases": ["gateprompttokens", "gatereusedtokens"],
      "grounding": "mingateturns",
      "grounding_kind": "metric",
      "glossary_anchor": "",
      "parent": "",
      "verdict": "defined",
      "gaps": []
    },
    {
      "id": "x2-guard-gate-gateturn",
      "canonical": "gateTurn (per-turn session gate)",
      "family": "guard-gate",
      "kind": "symbol",
      "definition": "The internal/agent gateTurn method: it applies the per-turn SessionGate at a turn boundary, returning the per-turn token cap, a proceed bool, and a stop reason (and sleeping any throttle gap) — wired by WithSessionGate.",
      "distinction": "It is a SESSION-PACING gate at the loop turn boundary (cap/proceed/throttle), NOT a tool-call adjudication gate and NOT the report CI gate.",
      "distinct_from": ["gate (decision point)", "guardrail (safety boundary)"],
      "aliases": ["withsessiongate"],
      "grounding": "gateturn",
      "grounding_kind": "symbol",
      "glossary_anchor": "",
      "parent": "",
      "verdict": "defined",
      "gaps": []
    },
    {
      "id": "x2-guard-gate-githookgatefns",
      "canonical": "gateDocPlacement (git-hook check function)",
      "family": "guard-gate",
      "kind": "symbol",
      "definition": "The internal/hooks staged-diff commit-boundary check functions: gateDocPlacement (doc placement rule), gateProvenanceLabel (provenance labels), and gatePublicLeak (public-leak scrub) each scan a StagedDiff and return findings.",
      "distinction": "These are concrete STATIC commit-boundary check functions (the git-hook gate implementations), NOT a runtime adjudication gate and NOT gitgate (the runtime git-command prefilter).",
      "distinct_from": ["git-hook gate", "gitgate (adjudicator)"],
      "aliases": ["gateprovenancelabel", "gatepublicleak"],
      "grounding": "gatedocplacement",
      "grounding_kind": "symbol",
      "glossary_anchor": "",
      "parent": "",
      "verdict": "defined",
      "gaps": []
    },
    {
      "id": "x2-guard-gate-gatedsinks",
      "canonical": "GatedSinks (egress-sink policy data)",
      "family": "guard-gate",
      "kind": "config",
      "definition": "The internal/ifc GatedSinks policy data: the configured set of egress/destructive/exec sink classes the SinkGate adjudicator reads to decide whether tainted arguments may flow into a sink.",
      "distinction": "It is the POLICY DATA (the sink set) the SinkGate enforces, NOT the SinkGate adjudicator itself and NOT a model gating weight.",
      "distinct_from": ["SinkGate (egress adjudicator)", "StrictGatedSinks (strict egress-sink policy)"],
      "aliases": [],
      "grounding": "gatedsinks",
      "grounding_kind": "symbol",
      "glossary_anchor": "",
      "parent": "",
      "verdict": "defined",
      "gaps": []
    },
    {
      "id": "x2-guard-gate-pythongate",
      "canonical": "pythongate (no-new-python-tools ratchet)",
      "family": "guard-gate",
      "kind": "subsystem",
      "definition": "The internal/pythongate leaf: a ratchet (TestNoNewPythonTools) that refuses introducing new Python tool scripts, holding the line on the Go-first tooling preference.",
      "distinction": "It is a SOURCE-TREE ratchet preventing new Python tools, NOT a runtime tool-call adjudication gate and NOT a git-hook commit gate.",
      "distinct_from": ["gate (decision point)", "git-hook gate"],
      "aliases": [],
      "grounding": "pythongate",
      "grounding_kind": "path",
      "glossary_anchor": "",
      "parent": "",
      "verdict": "defined",
      "gaps": []
    },
    {
      "id": "x2-guard-gate-loopgate",
      "canonical": "loopgate (loop done-witness gate)",
      "family": "guard-gate",
      "kind": "subsystem",
      "definition": "The internal/loopgate leaf: the STOP gate for the verified loop that adjudicates whether a goal is witnessed-done, returning verdicts like NotYet with reasons (DoneUnwitnessed) over criteria such as commit-audit or citation-resolve.",
      "distinction": "It is the LOOP COMPLETION gate (is the goal proven done?), NOT a tool-call adjudication gate and NOT the report CI gate.",
      "distinct_from": ["gate (decision point)", "shipgate (RSI promotion gate)"],
      "aliases": [],
      "grounding": "loopgate",
      "grounding_kind": "path",
      "glossary_anchor": "",
      "parent": "",
      "verdict": "defined",
      "gaps": []
    },
    {
      "id": "x2-guard-gate-windowgate",
      "canonical": "windowgate (no-desktop-popup gate)",
      "family": "guard-gate",
      "kind": "subsystem",
      "definition": "The internal/windowgate leaf: the no-desktop-popup gate (TestTrackedTreeHasNoPopups) that refuses code which would raise a blocking desktop window/popup.",
      "distinction": "It is a SOURCE-TREE gate against desktop popups, NOT a runtime tool-call adjudication gate and NOT the loop completion gate.",
      "distinct_from": ["gate (decision point)", "git-hook gate"],
      "aliases": [],
      "grounding": "windowgate",
      "grounding_kind": "path",
      "glossary_anchor": "",
      "parent": "",
      "verdict": "defined",
      "gaps": []
    },
    {
      "id": "x2-guard-gate-benchlineagegate",
      "canonical": "benchlineagegate (bench-emitter lineage gate)",
      "family": "guard-gate",
      "kind": "subsystem",
      "definition": "The internal/benchlineagegate leaf: the durable enforcement gate (TestEveryBenchEmitterStampsLineage) that requires every benchmark emitter to stamp its lineage.",
      "distinction": "It is a BENCH-EMITTER hygiene gate (lineage stamping), NOT a runtime tool-call adjudication gate and NOT the no-popup windowgate.",
      "distinct_from": ["gate (decision point)", "git-hook gate"],
      "aliases": [],
      "grounding": "benchlineagegate",
      "grounding_kind": "path",
      "glossary_anchor": "",
      "parent": "",
      "verdict": "defined",
      "gaps": []
    },
    {
      "id": "x2-guard-gate-residencygate",
      "canonical": "residencyGate (engine-residency adjudicator)",
      "family": "guard-gate",
      "kind": "symbol",
      "definition": "The internal/engine residencyGate: the rank-12 engine-residency Adjudicator that DENIES a tenant-scoped tool call routed to a remote/off-device path (ReasonTrustViolation).",
      "distinction": "It is a registered PRE-CALL ADJUDICATOR rung (deny remote tenant routing), NOT a result admitter and NOT a source-tree hygiene gate.",
      "distinct_from": ["gate (decision point)", "ResultAdmitter (post-call gate)"],
      "aliases": [],
      "grounding": "residencygate",
      "grounding_kind": "symbol",
      "glossary_anchor": "",
      "parent": "",
      "verdict": "defined",
      "gaps": []
    },
    {
      "id": "x2-guard-gate-smokegate",
      "canonical": "SmokeGate (swebench smoke-check gate)",
      "family": "guard-gate",
      "kind": "symbol",
      "definition": "The internal/swebench SmokeGate: one named smoke-check row in the opus-smoke harness (rendered by renderSmokeGatesTable as a Gate | OK | Detail markdown table) recording whether a pre-run readiness check passed.",
      "distinction": "It is a SMOKE-CHECK readiness gate row in a benchmark harness, NOT a runtime tool-call adjudication gate and NOT the loop completion gate.",
      "distinct_from": ["gate (decision point)", "ContractGate (contract validation gate)"],
      "aliases": ["rendersmokegatestable"],
      "grounding": "smokegate",
      "grounding_kind": "symbol",
      "glossary_anchor": "",
      "parent": "",
      "verdict": "defined",
      "gaps": []
    },
    {
      "id": "x2-guard-gate-modelgatevars",
      "canonical": "gateUp (FFN gate+up split locals)",
      "family": "guard-gate",
      "kind": "symbol",
      "definition": "Local identifiers in internal/model's weight-loading code: gateUp is the concatenated gate++up tensor in the fused-split path, and gateName is the gate_proj weight's resolved name in the safetensors quantizer.",
      "distinction": "These are NEURAL-NET FFN gate-projection LOAD-TIME locals (handling gate_up_proj / gate_proj weights), NOTHING to do with adjudication gates; siblings of mlp.gate_proj, not the guard kernel.",
      "distinct_from": ["mlp.gate_proj (FFN gate projection)", "gate_up_proj (fused SwiGLU gate+up)", "guard (fak guard kernel)"],
      "aliases": ["gatename"],
      "grounding": "gateup",
      "grounding_kind": "symbol",
      "glossary_anchor": "",
      "parent": "",
      "verdict": "defined",
      "gaps": []
    },
    {
      "id": "x2-guard-gate-newgate",
      "canonical": "NewGate (headroom/rehydrate gate constructor)",
      "family": "guard-gate",
      "kind": "symbol",
      "definition": "The NewGate constructors in internal/headroom and internal/rehydrate: each builds a fresh admission Gate (independent counters / sorted rungs) used as a post-call admit ladder.",
      "distinction": "It is a GATE-OBJECT CONSTRUCTOR for an admission ladder, NOT a specific named gate (StampGate/SinkGate) and NOT the guard kernel.",
      "distinct_from": ["gate (decision point)", "ResultAdmitter (post-call gate)"],
      "aliases": [],
      "grounding": "newgate",
      "grounding_kind": "symbol",
      "glossary_anchor": "",
      "parent": "",
      "verdict": "defined",
      "gaps": []
    },
    {
      "id": "x2-guard-gate-newliftguard",
      "canonical": "newLiftGuard (stream lift guard)",
      "family": "guard-gate",
      "kind": "symbol",
      "definition": "The internal/gateway newLiftGuard constructor: builds the streaming lift-guard that watches a model's streamed content (via an emit callback) during the planner/proxy stream path.",
      "distinction": "It is a STREAM-CONTENT lift guard in the gateway emit path, NOT a tool-call adjudication gate and NOT the guard kernel.",
      "distinct_from": ["gate (decision point)", "guardrail (safety boundary)"],
      "aliases": [],
      "grounding": "newliftguard",
      "grounding_kind": "symbol",
      "glossary_anchor": "",
      "parent": "",
      "verdict": "defined",
      "gaps": []
    },
    {
      "id": "x2-guard-gate-procresourceguard",
      "canonical": "FleetProcResourceGuard (runaway-process guard)",
      "family": "guard-gate",
      "kind": "subsystem",
      "definition": "The FleetProcResourceGuard Windows Scheduled Task (register_proc_resource_guard.ps1): the process-resource peer of the find/grep runaway guard that kills runaway fleet processes by resource budget.",
      "distinction": "It is an OS-level RESOURCE guardrail killing runaway processes, NOT the in-process guard kernel and NOT a tool-call adjudication gate.",
      "distinct_from": ["guard (fak guard kernel)", "guardrail (safety boundary)"],
      "aliases": [],
      "grounding": "procresourceguard",
      "grounding_kind": "path",
      "glossary_anchor": "",
      "parent": "",
      "verdict": "defined",
      "gaps": []
    },
    {
      "id": "x2-guard-gate-envtoggles",
      "canonical": "FAK_GITGATE (gate env toggles)",
      "family": "guard-gate",
      "kind": "config",
      "definition": "The environment-variable toggles for two adjudication rungs: FAK_GITGATE turns the internal/gitgate git-shape prefilter on/off, and FAK_NORMGATE turns the internal/normgate canonicalize-and-rescan ResultAdmitter on/off.",
      "distinction": "These are ENV-VAR ON/OFF SWITCHES for the gitgate and normgate rungs, NOT the rungs themselves and NOT the guard kernel.",
      "distinct_from": ["gitgate (adjudicator)", "normgate (result admitter)"],
      "aliases": ["faknormgate"],
      "grounding": "fakgitgate",
      "grounding_kind": "symbol",
      "glossary_anchor": "",
      "parent": "",
      "verdict": "defined",
      "gaps": []
    }
  ]
}
