By read, do you mean git fetch for example? It lets you creates policies around any action

And reading is also an "action"? So gating actions means gating read as well?

Let me know if I misunderstood the question