FalseGreen PR Gate · Free

Require FalseGreen acceptance before merge.

Add FalseGreen to your pull-request checks. Job-backed pull requests must satisfy the authoritative FalseGreen decision bound to their exact source head.

PR Gate is the enforcement edge of the broader acceptance platform: it carries a source-bound result from verification into delivery.

Install PR Gate

Exact-head enforcement

Pull request opened
↓ prove exact PR head
FalseGreen Core decision
PASS → pass
REVIEW → pass (human review)
BLOCK → fail

REVIEW is non-blocking: Core cannot auto-decide this exact head yet, so a human must review before merge.

Self-service installation

One client. Your existing API key.

The official client includes the production service endpoint and response trust. You do not need to configure either one.

  1. 01

    Connect your Account.

    The Gate authenticates with your FalseGreen API key — your organization's key, the same one you use with falsegreen login. If you do not have an Account yet, connect one first (Install), then get the API key from your Account.

  2. 02

    Install PR Gate.

    cargo install falsegreen-gate

    Available from crates.io.

  3. 03

    Save the API key as a CI secret.

    Store your FalseGreen API key in your CI secret store as FALSEGREEN_KEY.

  4. 04

    Run it in CI.

    falsegreen-gate

    Run Gate after checkout. The client detects the repository, request, and exact head from the git checkout and CI provider, then require the resulting check in branch protection.

Copy the CI provider configuration →

Narrow authority

Gate checks authority. It does not create it.

PR Gate identifies the pull request's exact source, asks FalseGreen Core for the authoritative decision, verifies the signed response, and permits or blocks CI.

Its dedicated, read-only, organization-scoped credential is separate from MCP. Gate cannot create or consume Jobs, run verification, infer acceptance from a report, or mint acceptance of its own.

Tests, ordinary CI, and human review remain in place.

Source identity

The checked source must match the claim.

PR Gate reconciles CI metadata with the checked-out Git state and asks Core about the exact repository, change request, and head. Dirty, ambiguous, or contradictory identity fails closed.

GitHub Actions · GitLab CI · Buildkite · Jenkins · CircleCI · Drone · Azure DevOps · Generic CI

Core decides

Pass, review, or fail closed.

PASSPass

The Job for this exact pull-request head is Accepted. The signed report is bound to this head (exit 0).

REVIEWPass — human review

The Job for this exact head is running, incomplete, or closed without a verdict. CI is not blocked; a human must review before merge (exit 0, non-blocking).

BLOCKFail

The Job for this exact pull-request head has failed, terminally. The merge is blocked (exit 1).

INTEGRITY_ERRORFail closed

Source, credential, service, or response integrity cannot be established. Nothing passes (exit 3).

Exact-head boundary

Push another commit? The previous acceptance does not authorize it.

An Accepted result for head A does not authorize head B, a later push, an unrelated merge commit, a squash or rebase result, or another source specimen. The changed head needs its own applicable acceptance result.

FalseGreen PR Gate · Free

Require the decision that belongs to this head.

Install PR Gate