gateCRA
Evaluates encoded cyber-resilience and product-security conditions for a defined product or lifecycle state. It does not confer market authority.
PRODUCT SECURITY STATE IS NOT MARKET AUTHORITY.
CAN
- deterministically evaluate encoded conditions within the defined domain and scope
- bind determinations to source, input, scope and point-in-time state
- surface missing, expired or conflicting dependencies
- produce attributable evidence for the concrete determination
CANNOT
- replace a legislature, regulator, court, supervisor or other competent institution
- create authority through score, consensus, AI, infrastructure or administration
- turn a gate PASS into an Execution Right on its own
- mint an ExecutionCapabilityToken on its own
Determination is evidence. Not authority.
Authoritative source
Relevant authority originates outside the system.
Defined matter
The determination is limited to the encoded matter under review.
Point-in-time state
Effective dates, transitions, expiry and version state remain explicit.
Canonical input
A reproducible determination requires a defined canonical input state.
Dependencies
Missing or contradictory dependencies remain visible rather than becoming invented permission.
Bound evidence
The resulting state can be bound to source, input, scope and time for later verification.
Domains compose. They do not confer authority on one another.
Only scope-relevant determinations become dependencies in Execution Rights resolution. The links shown are not a universally mandatory sequence.
Five dimensions. Domain state can inform them; no gate replaces them.
A gate result is a determination. Never a permission by itself.
AUTHORITY → DETERMINATION → EXECUTION RIGHTS → CAPABILITY OR NONE → EXECUTION OR NONE → EVIDENCE