How the gate works
This tool grades a document corpus before you point a RAG pipeline or assistant at it. Each signal is scored 0–1; the verdict is the weakest one — then a gate that can only make it worse.
The 6 signals
Single source of truth and access-permission mapping are grounding triggers: either one below full score forces UNGROUNDED even if the corpus's weakest control would only read STALE.
Why: Single source of truth reads Partial, and a grounding-trigger control below full always forces UNGROUNDED - contradictory authoritative docs make retrieval a coin flip, even though the weakest control alone would only read STALE.
A clean sheet didn’t save it. The verdict is the weakest signal — and a top trigger is dispositive on its own — so it names the one thing to fix first. This grades a corpus you describe, not any person. It reads no live data, connects to nothing, and is a readiness aid, not a security audit or legal advice.