DESIGN.md@crates/sekishoC
DESIGN.md@crates/sekisho from i2y/ritsu is a DESIGN.md file: the design rules coding agents follow in that repo.
mdr add i2y/ritsu/crates/sekisho/DESIGN.md@git:20261103.558b890Pins git:20261103.558b890 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- C, 12 of 14 checks passed
- Kind
- DESIGN.md file
- Repository
- i2y/ritsu
- Path
crates/sekisho/DESIGN.md- Versions recorded
- 8
- Latest version
- git:20261103.558b890, committed Nov 3, 2026
- First version recorded
- Oct 23, 2026
- Size
- 373,247 bytes
- Repository stars
- 3
- License
- Apache-2.0
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# sekisho 設計文書 認可を書く小さな言語。ファイルは `.gate`、コマンドは `sekisho`。だれ（`principal`）が、何（`resource`）に、何をして（`action`）よいかを、役割・属性・関係と、rulec の規則と koyomi の日付の答えを条件にして書く。宣言した範囲のすべての組み合わせで確かめ、Cedar のスキーマとポリシー、Cedar に渡すリクエストを組み立てるコードを生成する。評価するのは本物の Cedar である。 名前は関所（せきしょ）から取った。 この文書は設計の段階（2026-10-06）に書き、言語の芯を作った段階（A）で、作ったものに合わせて直した。設計の段階では、ritsu 0.23.0 を読み、2026-10 の時点の Cedar とまわりの道具を調べて決めた。決めたことのうち、Cedar で本当にそうなるかが分かれ目になるものは、手で書いた例を公式の Cedar の CLI 4.13.0、cedar-wasm 4.13.0、cedarpy 4.12.1、cedar-go v1.8.0 にかけて確かめた（6 章）。例の規則・日付・ワークフローは、ritsu 0.23.0 の `rulec check`・`koyomi check`・`dandori check` と `ritsu check` を通してある。例の Cedar とリクエストを組み立てるコードは、sekisho が生成する形を手で書いた見本である。`.gate` の検査の結果として載せた数は、設計の段階には、検査が数える形を Python で書いた使い捨ての試作の出力（1,090 通りなど）だった。A で全部の組み合わせの検査を作り、4 章、7 章、10 章の数と文を実物の出力に差し替えた（6.2 の表は、試作を四つの実装に流した記録なので残した）。A では、字句と構文、名前と型、診断の台帳、`check` と `explain` のコマンド、`ritsu sekisho` と `ritsu check` の入口、口のまとまり `GatePorts` と口 `Gates` の型、rulec の `outputs_over`、koyomi の `calendar` と `doc`、OpenAPI と AsyncAPI の操作の読み手、全部の組み合わせの検査と参照の評価、行を合わせた表を作った。2.8、2.10、3 章、4 章、7〜10 章をそれに合わせて直し、16 章を決めたことの形に書き直した。段階 B では、Cedar のスキーマとポリシーの生成（`gen --target cedar`）、全部の組み合わせを `cedar run-tests` のテストにする `vectors`、外のツールのための JSON の… …
Read the whole file at its exact version.
How to install
mdr add i2y/ritsu/crates/sekisho/DESIGN.md@sha256:fd10367121ad7b09The line at the top of this page pins the label git:20261103.558b890, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_g6i5yhwynhbcdq3w)
1 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 8 versions of this file, between Oct 23, 2026 and Nov 3, 2026, about one every 2 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261103.558b890 latest | 2026-11-03 | 558b890 | 373,247 B | C | view · diff |
| git:20261103.dc6317c | 2026-11-03 | dc6317c | 366,222 B | C | view · diff |
| git:20261031.76f9a81 | 2026-10-31 | 76f9a81 | 364,257 B | C | view · diff |
| git:20261029.200ec28 | 2026-10-29 | 200ec28 | 363,082 B | C | view · diff |
| git:20261029.4321eaf | 2026-10-29 | 4321eaf | 363,276 B | C | view · diff |
| git:20261029.9716f08 | 2026-10-29 | 9716f08 | 363,230 B | C | view · diff |
| git:20261023.eae3a22 | 2026-10-23 | eae3a22 | 362,763 B | C | view · diff |
| git:20261023.bd74494 | 2026-10-23 | bd74494 | 348,814 B | C | view |
Audit of the latest version
- fail: Size between 200 bytes and 200 KB (373247 bytes)
- fail: No script tag (matched: <script)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
Starting a new one? Use a template for DESIGN.md on mdpantry, which passes every one of these checks and says what to change in it.
Source
i2y/ritsu · 3 stars · license Apache-2.0 · pushed 2026-11-07 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_g6i5yhwynhbcdq3w GET https://markdownregistry.com/api/v1/resolve?ref=i2y/ritsu/crates/sekisho/DESIGN.md GET https://markdownregistry.com/api/v1/blob/fd10367121ad7b098e734051b046ca12464198b2cf496b37d7fdc693d03e6107
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: what DESIGN.md is and how agents use it · which agent file does what.