gate-buildDeploy BLD-001 and DEV-001: a non-root container user, a digest-pinned image and a complete devcontainer lock file, enforced at both declared loci. Triggers: 'deploy gate-build', 'pin the devcontainer', '/gate-build'.
gate-iacDeploy IAC-001: run the register's infrastructure analysers over all Terraform at pre-commit and in CI, where their exit codes block the merge. Triggers: 'deploy gate-iac', 'wire terraform analysis', '/gate-iac'.
gate-qualityDeploy LNT-001, TYP-001 and TST-001: wire the register's linter, type checker and test command at every locus they declare, stamp what it writes, verify through register-check. Triggers: 'deploy gate-quality', '/gate-quality'.
gate-repoDeploy CI-001: record the default-branch ruleset the register requires, then apply it through the GitHub API after an explicit confirmation. Triggers: 'deploy gate-repo', 'protect the default branch', '/gate-repo'.
gate-secretsWire the register's secret scanner at pre-commit and in CI, stamp what it writes, verify through register-check — deploys SEC-001, checks SEC-002 and SEC-003. Triggers: 'deploy gate-secrets', 'wire secret scanning', '/gate-secrets'.
gate-supply-chainDeploy SUP-001 to SUP-004: frozen lockfile install, update proposals per ecosystem, CI actions pinned to a SHA, and pinned digests checked against what was published. Triggers: 'deploy gate-supply-chain', 'pin CI actions', '/gate-supply-chain'.
register-adoptAdopt the Equal Experts control standard: list every change in plain English, confirm once, dispatch the gates, verify through the checker, commit. Triggers: 'adopt the standard', 'deploy the control register', '/register-adopt'.
register-installInstall the control register's checker into a repository, pinned to the tagged ref the register names, so every locus that runs it has something to run. Triggers: 'install the checker', 'install register-check', '/register-install'.
register-varianceReport which way a change to gated configuration moved — narrowing, loosening or neither — and say which keys could not be classified and why. Triggers: 'classify this variance', 'which way did this config move', '/register-variance'.