Gateway, Connections, and Effects

Gateway: credentialed external actions

Gateway performs typed external operations using credentials that remain outside the Agent Cell. A Connection names an approved provider identity and credential reference. An Effect is one exact external operation.

Example: the agent requests a Git push for a repository, branch, and commit. cellad evaluates policy and any required approval. Gateway then performs the authorized Effect through a Connection and returns a bounded result and receipt. The agent does not receive the reusable GitHub token.

Connections, Effects, and provider routes do not grant arbitrary internet or host access. An interrupted external operation requires reconciliation so a retry does not blindly repeat its consequence.

Further reading: Credentialed effect flow.