Engineering notes on agent release-readiness, tool-surface scanning, and the decisions behind agents-shipgate.https://threemoonslab.com/en-ushttps://threemoonslab.com/blog/from-cicd-to-agent-release-readiness/https://threemoonslab.com/blog/from-cicd-to-agent-release-readiness/CI/CD made code releases safe. Agent releases need an analogous shift — tool surface, scopes, and policies become release artifacts the same way code did.Mon, 27 Apr 2026 00:00:00 GMTrelease-readinessinfrastructurecategoryThree Moons Labhttps://threemoonslab.com/blog/why-evals-are-not-release-gates/https://threemoonslab.com/blog/why-evals-are-not-release-gates/Evals validate behavior on inputs you wrote. They don't answer the release question for a tool-using agent. Here's what each is for, and why conflating them ships bugs.Mon, 27 Apr 2026 00:00:00 GMTevalsrelease-readinessllmThree Moons Labhttps://threemoonslab.com/blog/agents-shipgate-vs-runtime-guardrails/https://threemoonslab.com/blog/agents-shipgate-vs-runtime-guardrails/Runtime guardrails enforce policy at call time. agents-shipgate enforces it at PR time. Both are necessary; neither replaces the other.Mon, 27 Apr 2026 00:00:00 GMTrelease-readinessguardrailsinfrastructureThree Moons Labhttps://threemoonslab.com/blog/mcp-tool-surfaces-need-release-review/https://threemoonslab.com/blog/mcp-tool-surfaces-need-release-review/MCP makes it trivial to expose dozens of tools to an agent. The exported tool surface is a release artifact — review wildcards, scopes, and undocumented actions before promotion.Mon, 27 Apr 2026 00:00:00 GMTmcptool-userelease-readinessThree Moons Labhttps://threemoonslab.com/blog/what-is-tool-use-readiness/https://threemoonslab.com/blog/what-is-tool-use-readiness/Tool-use readiness is the static check that an agent's tool surface can ship: inventory, schema, auth, approval, side effects, idempotency, blast radius.Mon, 27 Apr 2026 00:00:00 GMTrelease-readinessplatform-engineeringtool-useThree Moons Labhttps://threemoonslab.com/blog/tool-surface-release-gate/https://threemoonslab.com/blog/tool-surface-release-gate/Tools are release artifacts. Evals are not release gates. Once an agent can refund, email, or deploy, the tool surface itself needs a deterministic check before promotion.Mon, 27 Apr 2026 00:00:00 GMTagentsrelease-readinesstool-useinfrastructureThree Moons Labhttps://threemoonslab.com/blog/walking-a-release-readiness-report/https://threemoonslab.com/blog/walking-a-release-readiness-report/A real agents-shipgate report on a real Anthropic-published agent. Thirteen findings — what each one means and the manifest change that resolves it.Mon, 27 Apr 2026 00:00:00 GMTrelease-readinesstutorialexamplesThree Moons Labhttps://threemoonslab.com/blog/agents-shipgate-github-action-quickstart/https://threemoonslab.com/blog/agents-shipgate-github-action-quickstart/Drop a workflow into .github/workflows/, set advisory mode, and every PR gets a structured tool-surface review with severity counts and finding evidence.Mon, 27 Apr 2026 00:00:00 GMTtutorialgithub-actionsci-cdrelease-readinessThree Moons Labhttps://threemoonslab.com/blog/anthropic-claude-tool-use-release-gate/https://threemoonslab.com/blog/anthropic-claude-tool-use-release-gate/Anthropic's Messages API tool surface lives in a JSON tools array plus a system prompt. agents-shipgate scans both and produces release-readiness findings on every PR.Mon, 27 Apr 2026 00:00:00 GMTanthropicclaudetool-usetutorialrelease-readinessThree Moons Labhttps://threemoonslab.com/blog/openai-agents-sdk-release-gate/https://threemoonslab.com/blog/openai-agents-sdk-release-gate/If your agent is built with @function_tool decorators, agents-shipgate reads the source statically (no import) and produces release-readiness findings on every PR.Mon, 27 Apr 2026 00:00:00 GMTopenai-agents-sdktutorialrelease-readinessThree Moons Lab