| status | Agents Shipgate summary status (legacy v0.7 caller; baseline-blind). |
| critical_count | Number of unsuppressed critical findings. |
| high_count | Number of unsuppressed high findings. |
| medium_count | Number of unsuppressed medium findings. |
| baseline_new_count | Number of new findings when a baseline is used. |
| baseline_matched_count | Number of baseline-matched findings when a baseline is used. |
| baseline_resolved_count | Number of baseline findings resolved by the current scan. |
| adk_agent_count | Number of Google ADK agents statically detected. |
| adk_dynamic_toolset_count | Number of Google ADK toolsets that were dynamic or unresolved. |
| report_json | Path to the generated JSON report. |
| report_markdown | Path to the generated Markdown report. |
| report_sarif | Path to the generated SARIF report. |
| verifier_json | Path to verifier.json. |
| verify_run_json | Path to verify-run.json. |
| agent_handoff_json | Path to agent-handoff.json. |
| verification_receipt_json | Path to the validated terminal verification receipt. |
| request_id | Content-addressed verification request identity. |
| receipt_id | Content-addressed terminal receipt identity. |
| decision_id | Content-addressed assembled decision identity. |
| artifact_set_id | Content-addressed artifact-set identity. |
| run_id | Deterministic verify-run input identity from verify-run.json. |
| pr_comment_markdown | Path to the generated PR comment Markdown. |
| check_annotations_json | Path to generated GitHub Actions annotation payload. |
| capability_lock_json | Path to generated head capability lock JSON. |
| base_capability_lock_json | Path to generated base capability lock JSON when base diff is available. |
| capability_lock_diff_json | Path to generated capability lock diff JSON when base and head locks are available. |
| attestation_json | Path to generated release attestation JSON when attestation is true. |
| org_evidence_bundle_json | Path to generated organization evidence bundle JSON when org_bundle is true. |
| host_grants_json | Path to generated host-grants inventory JSON when host_audit is true. |
| org_status_json | Path to generated organization status JSON when org_status is true. |
| exit_code | Agents Shipgate CLI exit code. |
| decision | Release decision (`blocked`, `review_required`, `insufficient_evidence`, or `passed`). v0.8+; `insufficient_evidence` added v0.14. |
| blocker_count | Number of blockers in release_decision (v0.8+). |
| review_item_count | Number of review items in release_decision (v0.8+). |
| ci_would_fail | Whether the active fail policy would fail CI (`true`/`false`). v0.8+. |
| diff_enabled | Whether tool_surface_diff was enabled in report.json. |
| action_diff_enabled | Whether action_surface_diff was enabled in report.json. |
| actions_added | Number of actions added by Action Surface Diff. |
| actions_modified | Number of actions modified by Action Surface Diff. |
| actions_removed | Number of actions removed by Action Surface Diff. |
| should_run | Trigger evaluator should_run value from verifier.json (`true`/`false`). |
| trigger_action | Final trigger action (`force_run`, `run_shipgate`, `skip_shipgate`, `dry_run`, or `none`). |
| trigger_rule_ids | Comma-separated trigger rule IDs that matched. |
| verifier_verdict | Verifier convenience verdict. Prefer `decision` for CI gating; projected from release_decision. |
| merge_verdict | PR/controller verdict projected from release_decision (`mergeable`, `human_review_required`, `insufficient_evidence`, `blocked`, or `unknown`). Use `decision` for CI gating. |
| can_merge_without_human | True only for a verified passed result or a completed deterministic not-applicable skip. |
| agent_control_state | Authoritative agent control state (`complete`, `agent_action_required`, or `human_review_required`). |
| agent_control_reason | Deterministic reason for the authoritative agent control state. |
| agent_controller_must_stop | Compatibility mirror of verifier.json.control.must_stop (`true`/`false`). |
| agent_controller_stop_reason | Compatibility mirror of verifier.json.control.stop_reason. |
| agent_controller_completion_allowed | Compatibility mirror of verifier.json.control.completion_allowed (`true`/`false`). |
| trust_root_touched | Whether verifier_summary reports a touched release trust root (`true`/`false`). Review signal; not a second gate. |
| policy_weakened | Whether verifier_summary reports a policy weakening (`true`/`false`). Review signal; not a second gate. |
| capability_changes_added | Supporting/provisional count of added members in the capability delta; not a second gate. |
| capability_changes_modified | Supporting/provisional count of broadened plus narrowed capability delta members; not a second gate. |
| capability_changes_removed | Supporting/provisional count of removed members in the capability delta; not a second gate. |