xkazm04/Ascent maturity gate

Fail CI when a repository is below the AI-native maturity bar (scored by Ascent).

Trust Signals

name	description	required	default
ascent-url	Base URL of your Ascent deployment (serves /api/gate).	yes	—
repo	owner/repo to gate (defaults to the current repository).	no	""
ref	Git ref to gate — branch, tag, or commit SHA. On a pull_request, set this to the PR head SHA to score what the PR changes (e.g. ${{ github.event.pull_request.head.sha }}).	no	""
min-level	Minimum overall maturity level, e.g. L3.	no	""
min-overall	Minimum overall score (0..100).	no	""
min-dimension	No single dimension may score below this.	no	""
min-security	Minimum Security (D9) dimension score — the security gate floor.	no	""
no-ungoverned	Fail if the posture is 'ungoverned' (heavy AI, light guardrails).	no	false
require-protection	Fail if the default branch has no branch-protection rules (when readable).	no	false
live	Score with the configured LLM instead of the deterministic mock.	no	false

no outputs