evaluating-deterministic-gate-quality

Review a deterministic gate -- a git hook, an agent-harness hook, a CI/CD job step, or an MCP-server-level check -- for whether it is well-placed and well-built, separating deterministic shape from probabilistic maturity, citing concrete evidence per dimension, and closing with a coverage-attestation pass over the target repository's own stated invariants. Use when reviewing an existing gate before merging or shipping it, when deciding which of several possible mechanisms should own a new policy, or when auditing a repository's overall gate coverage; distinct from evaluating-skill-quality (grades a SKILL.md's own content, not a gate) and screening-a-low-trust-contribution (screens an incoming diff for contribution-level threat, not gate design quality); it routes an exposure or privilege finding to vetting-attack-surface rather than analysing one itself.