A gate that fails open is not a gate. SHACKLE denies anything it cannot canonicalize or verify, evaluates every tool call before it runs (ALLOW / DENY / HITL), and records each decision in a hash-chained ledger. Deterministic and reproducible. Open source: pip install pyshackle. github.com/Fame510/SHACKLE