Minimum Production setup

Use this path for the dexgate Production ($99) early-access / pilot plan. Multi-environment labs are optional and documented separately. This is not a general-availability production guarantee.

All adapters are public beta (no external licensed production reference yet). Recommended free path: OpenClaw (most mature free path). Also mature beta: Codex (controlled host coverage; readonly governance gaps possible). Early beta: Grok Build, Claude Code, Cursor, and GitHub Copilot — same free hard-gate / paid Passport model. See all adapters. Paid runtime: early access / pilot until first-customer governed success is proven. Compatibility matrix labels are internal evidence scope, not a general production guarantee.

The paid pilot runtime is shared. Point any entitled beachhead adapter (OpenClaw recommended free path, Codex mature beta, or early-beta Grok/Claude/Cursor/Copilot) at the same PDP once you have secrets from the console.

What you need

Windows note: Free install and agent hooks work on Windows. The paid runtime bootstrap targets Linux Docker (or WSL2 with Docker Desktop). Plan for one Linux host before checkout if you only have Windows today.

Steps (same day)

1. Complete free first success for your adapter (OpenClaw, Codex, or a beta adapter) so local hardening is proven.
2. Purchase Production at Pricing (or request access if self-serve is in pilot).
3. Set console password from the confirmation email → Sign in.
4. Open Downloads: runtime bundle, customer config, runtime secrets, bootstrap, checksums.
5. On the Linux Docker host: run bootstrap; confirm curl http://localhost:8001/healthz returns ok.
6. On the agent host: configure the adapter with tenantId, gatewayId, environment, pdpUrl, and PDP_AUTH_TOKEN from secrets.
   • OpenClaw: npx openclaw-trusted-mode-configure … then npx openclaw-trusted-mode-check --json (inherits config).
   • Codex: set PDP mode + token, then hosted validation turn when authorized.
   • Beta adapters (Grok/Claude/Cursor/Copilot): set toolPolicyMode=PDP and the same five values; use each package’s hook/check path.
7. Day-2 verify: healthz ok → adapter check shows governed path (not local-hardening) → console Deployments healthy → Decision/passport history (or local dashboard on :8001) after one gated action.

What success looks like

• Free report: governed: false, source: local-hardening
• Paid check: PDP decision with Passport fields on allow/constrain (or explicit deny with reason)
• Not success: mock PDP only, or still source: local-hardening after configure

When you need more

Multi-host environments, profile JSON, and multi-adapter labs: Customer setup tutorial. Do not start there for first paid success.