> For the complete documentation index, see [llms.txt](https://dsg-3.gitbook.io/dsg-docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://dsg-3.gitbook.io/dsg-docs/control-plane/dsg-production-gate-legacy-rest-contract.md).

# DSG Production Gate — Legacy REST Contract

Legacy Render REST gate contract retained for compatibility history. Current DSG production authority is AWS/Spacetime; do not default production calls to Render.

> **Do not use the former Render URL as the current production default.** This page documents the legacy REST gate client contract. Current production governance authority is DSG Spacetime on AWS.

## Current production governance entry

Current governed MCP edge:

`https://aws.dsg.pics/mcp`

Current production status must be obtained through verified AWS surfaces and current Route discovery. A current public binding for the legacy REST paths below has **not** been verified in this documentation update.

## Legacy REST contract

Historical routes:

```
POST /api/dsg/v1/gates/evaluate
POST /api/dsg/v1/proofs/prove
```

Former Render base:

`https://tdealer01-crypto-dsg-control-plane.onrender.com`

Do not invoke the former Render base as current production. Do not guess an AWS REST replacement URL. If a workflow still depends on these REST routes, verify the exact current public binding first or migrate it to the governed Spacetime MCP Route.

## Decision contract

| Remote result                  | Agent behavior                                                                          |
| ------------------------------ | --------------------------------------------------------------------------------------- |
| `PASS`                         | Continue only when the verified current production response supplies required evidence. |
| `REVIEW`                       | Stop automated execution and surface review.                                            |
| `BLOCK`                        | Stop; do not execute.                                                                   |
| `UNSUPPORTED`                  | Stop; never convert to PASS.                                                            |
| Network/API/malformed response | Stop; production decision is unverified.                                                |

## Credential boundary

Use server-side credentials with the minimum scope required. Never print, commit, persist in docs, or put raw credentials into evidence bundles.

## Current truth boundary

* AWS/Spacetime is current production authority.
* The historical Render REST client remains a compatibility/reference artifact only.
* A route/path in source code is not evidence that it is publicly routed in current production.
* If the current binding is not directly verified, report it as OPEN/UNVERIFIED rather than silently falling back to Render.
