agent-image-env-gate
Builds and inspects the compass-agent image. It catches leaked development
environment values, build-host paths, and platform mismatches that a successful
image build alone does not detect.
moon run agent-image-env-gate:checkmoon run agent-image-env-gate:cicheck builds the image and checks its OCI configuration. ci also runs the
typecheck and fixture tests. CI runs the selected task in the moon (bun) job
of .github/workflows/ci.yml; the check depends on
compass-agent-image:build.
Credentials
Section titled “Credentials”None. The gate reads the checkout and local Nix build output; it does not read a secret or token.
Rotate
Section titled “Rotate”Nothing to rotate.