github.enforceModule 29Make a commit's check go red unless the agent behind it holds the grant and, for a write, a human has confirmed.
github.enforce admits a repository action through Intralock and reports the verdict back to GitHub as a check run or commit status. It admits repo:<repo>, defaults the action to write, and pins an allowed commit to the agent so later webhook events for that sha ride the same decision.
Put admission in front of your MCP servers, repositories, SaaS tools and cloud accounts. Every agent gets a lease or a reason – and you keep the lever to stop any of them.
© 2026 Intramedial. All rights reserved. Intramedial is a product by Trustvice. Secured and supercharged by Avonao Labs.
Report abuseWithout GITHUB_PAT or a bound GitHub App the verdict is still returned and ledgered, but commitStatus and checkRun are null, so nothing shows on the commit. Bind one, then confirm with github/app.
Plane module
repoacme/payments. The admitted resource is repo: followed by this value.actorDidactionread, or . Anything else, or nothing, is admitted as ./docs/github-enforceAPI referenceRoutes, bodies and status codes./docs/github-enforceOpen the consoleSee the module at work in the dashboard, on a seeded fleet or your own./app/enforcementStart freeCreate a workspace and admit your first intent./auth/signup
writedeletewriteshaconfirmationTokenallowreasonconfirmation_required or no_grant.commitStatusnull.checkRunnull.enforce takes repo, actorDid, sha and an action of read, write or delete. With no sha it uses the last head the gateway ingested for that repo.
The gateway admits repo:<repo> for that actor and action. A write with no confirmation comes back confirmation_required.
The verdict is posted as the intramedial/acp check run when an App is bound, or as a commit status. Allow is success; refusal is failure.
A signed review or comment of /acp allow mints a token for the pinned actor and enforces again. /acp deny drops the pin if that actor holds it.
Runs in a shared demo workspace with a demo key: anyone can see what it holds, so send nothing private. github.enforce docs
Press Run to send the request on the left to the shared demo workspace.
Runs in a shared demo workspace with a demo key: anyone can see what it holds, so send nothing private.
A request in the shape the API accepts, and an example response in the shape the module returns.
POST /api/v1/acp/github/enforce Authorization: Bearer av_workspace_•••• Content-Type: application/json { "repo": "acme/payments", "actorDid": "did:web:acme.example:agent:billing", "action": "write" } → 200 { allow, reason, commitStatus, checkRun }
{
"allow": false,
"llm": false,
"reason": "confirmation_required",
"sha": "9fceb02d0ae598e95dc970b74767f19372d61af8",
"repo": "acme/payments",
"commitStatus": null,
"checkRun": {
"id": "4417203551",
"url": "https://github.com/acme/payments/runs/4417203551"
}
}Require the intramedial/acp check on the branch. A pending or failed check keeps the agent's commit from merging until someone confirms it.
A reviewer comments /acp allow. The signed webhook mints the token, admits again and flips the same commit's status to success.
revoke drops the pin an agent holds for a sha and posts a failure, so a commit already approved can be refused again.
namespace rewrites an agent's branch under agent/<slug>/ and refuses protected names such as main, release* and hotfix/*.
mcp.enforce; this module works on repositories and commits.coordination.approve; this module posts the result.namespace knows protected branch names.A module is a strong claim about a narrow thing. Rely on it for exactly what it is.
llm: false; the same actor, repo and action give the same answer as coordination.admit.github.enforce event to the ledger with the repo, sha, outcome and reason.enforce posts the failure.intramedial/acp; the gateway cannot set that for you.revoke is an explicit call that is gated by a warrant; no ruling triggers it.With a GitHub App bound the verdict is a check run named intramedial/acp, with commit status as the fallback. A GITHUB_PAT posts commit status only.
An allowed write records the actor against repo, action and sha. A later event for that sha can then mint a token for the same actor without a second human.
Pull request, check suite, check run, workflow run and merge group events admit the head as a write and post a pending status until a token arrives.
revoke needs policies.approve and a dual-control or adjudicated warrant. enforce, ingest and status take no role of their own.
null.status returns the last 50 ingested items, filtered by repo or sha when given.revoke without a warrant returns 403 because warrant-gated routes are closed by default.namespace takes actorDid and branch; without an actor it returns 400.Authenticate with a workspace API key as a Bearer token. The base URL is https://api.intramedial.com.
/api/v1/acp/github/enforceAdmit a repository action and post the verdict to GitHub./api/v1/acp/github/ingestRecord a GitHub webhook and enforce the events that call for it./api/v1/acp/github/statusRead recent audit items, the last head and the pin holder./api/v1/acp/github/revokeDrop the sha pin held by the actor and post a failure.coordination.github.enforceAdmit a repository action from an agent.coordination.github.ingestRecord a webhook body from an agent.coordination.github.statusRead recent GitHub audit items from an agent.coordination.admit01Intralock admissionDecide every action before it happens: an agent declares its intent, and Intralock admits it or names the reason it may not.coordination.approve05Human approval queueHold a risky write or delete until a signed-in person approves it, with the agent, resource and verb in front of them.mcp.enforce04MCP gateway enforcementPut a front on an MCP server so each tool call is admitted like any other intent, and a refused call never reaches the server.saas.admit30SaaS connector admissionAsk whether an agent may touch a SaaS source, and let it write through one only after the same check that gates everything else.iam.assume31Cloud credential brokerGive an agent a short-lived cloud credential only while it holds a live lease on the role, and let the credential die with the lease.coordination.halt06Emergency stop switchesStop one agent, one mandate or one resource at once, with a reason on record, and lift the stop when it is safe.coordination.quarantine32