Interactive Action Passport demo

Stop AI coding agents before they make unsafe changes. This page is an illustrative example — not a captured customer event. It is a walkthrough of passport-gated coding and devops actions on supported surfaces; it does not call a live Dexgate runtime.

What you are looking at

  1. Intercept — shell, Git, patch, and deploy-class proposals can hit a gate before execution when the adapter is installed and enabled.
  2. Check policy — free path uses a local hard gate in OpenClaw once configured; paid path uses the licensed Dexgate runtime.
  3. Action Passport — paid path issues scoped evidence when allowed (free mode never mints Passports).
  4. Evidence — decision and outcome records you can show security on the paid path.
# free policy self-check (copy-paste, no account)
npx --yes --package=@dexgate/openclaw-trusted-mode@1.0.18 dexgate-assess

# expect
# packageSelfCheck: PASS (or FAIL)
# environment: best-effort OpenClaw/plugin inspect
# not proof a real agent turn was intercepted
# (does not install or enable the OpenClaw plugin)

# illustrative paid evaluation
agent.run("patch auth config and deploy")
→ DENIED · reason: missing rollout evidence · passport: none

Free policy self-check: packaged representative-action check plus best-effort OpenClaw/plugin inspection. Install and enable the OpenClaw adapter to enforce free policy in real sessions.

Paid path: Dexgate returns a policy decision; allowed production-bound actions can carry scoped Passport evidence when entitled.

Free policy self-check Install the free OpenClaw adapter Governed path

Adapter status is authoritative on the compatibility matrix only.