type	ProjectMeta
title	GATE Knowledge Bundle
description	OKF v0.1 conformant knowledge bundle for the GATE v1.4 framework.
tags	readme project-meta
timestamp	2026-06-25
gate_version	v1.4

gate-knowledge

GATE (Governed Agent Trust Environment) v1.4 conceptual layer published as an Open Knowledge Format (OKF) v0.1 bundle. Fifty-five OKF concepts covering twenty controls, twenty-seven threat-model concepts, four architecture layers, three adoption-path phases, and one ABOM template, organised as agent-navigable markdown.

OKF conformance claim

This bundle conforms to OKF v0.1 as defined by github.com/GoogleCloudPlatform/knowledge-catalog/blob/main/okf/SPEC.md at commit d44368c15e38e7c92481c5992e4f9b5b421a801d. See NOTICE for the Apache 2.0 attribution to the OKF specification.

Bundle navigation

The bundle is a directory tree. Each subdirectory has its own index.md for progressive disclosure.

Directory	Contents
controls/	Twenty controls (C01-C20) organised across four architecture layers.
threat-model/	Twenty-seven concepts: five assets at risk, four trust boundaries, eight ingress vectors, five attack scenarios, five security objectives.
architecture/	Four architecture-layer documents corresponding to the GATE four-layer design.
adoption/	Three adoption-path phases describing the Minimum Viable GATE rollout.
abom-templates/	One comprehensive ABOM (Agent Bill of Materials) template covering all 17 fields.

Open index.md for the top-level bundle map.

Installation

The bundle is read-only documentation; no installation is required. Clone the repository or browse it on GitHub:

git clone https://github.com/deterministic-agents/gate-knowledge.git
cd gate-knowledge

For programmatic consumption, walk the directory tree and parse the YAML frontmatter of each non-reserved markdown file. The type field is OKF-required; W9 producer extensions are depends_on, extends, distinct_from, source_of_truth, relates_to, gate_version, control_id, layer, and category-specific fields.

Validator

A custom Python validator enforces OKF v0.1 conformance and W9 producer-defined conventions. See tools/README.md for full documentation.

Quick start:

pip install -e .[dev]
python3 tools/validate.py --bundle-root . --strict
python3 tools/validate.py --bundle-root . --completeness-audit tools/completeness_audit.yaml
pytest tools/test_validate.py

CI runs the validator on every pull request and push to main; see .github/workflows/ci.yml.

Forking for your own deployment

The abom-templates/baseline-template.md is the canonical ABOM example. To deploy GATE in your environment:

1. Copy the template into your repository.
2. Replace placeholder values with your deployment's actual model, prompt bundle, tool schema, policy bundle, invariant bundle, and (optionally) the v1.2.0 additions for memory quality, output classification, and auto-enrolment.
3. Compute the ABOM hash over canonical-JSON of the template (use gate-python or gate-rust for byte-equivalent output).
4. Sign the ABOM with your operator key (C12 ES256 convention).
5. Register the signed ABOM with C04, and have the Tool Gateway (C05) verify the hashes on every request.

Repository

github.com/deterministic-agents/gate-knowledge under the deterministic-agents GitHub organisation, alongside gate-contracts, gate-policies, gate-conformance, gate-python, gate-rust, and gate-fuzz.

License and attribution

Bundle content: CC BY 4.0. See LICENSE.

OKF specification attribution: Apache 2.0 (the OKF spec itself is published by Google Cloud under Apache 2.0; this bundle declares conformance to OKF v0.1 but does not redistribute the spec). See NOTICE.

When attributing derivative works:

Stevens, A. (2026) 'GATE Knowledge Bundle v1.0.0'. Sakura Sky. Available at: https://github.com/deterministic-agents/gate-knowledge

Contributing

Updates to the bundle follow the manual-sync workflow documented in BUNDLE-REVIEW.md. When the GATE framework paper releases a new version (for instance, the v1.4 PDF post-Operation 4 of the coordinated release):

1. Identify changed sections of the paper.
2. Walk the source_of_truth frontmatter across the bundle to find concepts that cite the changed sections.
3. Update each affected concept document.
4. Record the sync in log.md with the date and approver identity.
5. Re-run the validator (tools/validate.py --bundle-root . --strict) to confirm conformance.

An automated derivation script is a v1.5 candidate per W9 PHASE-0.md A12.

Version

v1.0.0. Released alongside the GATE v1.4 framework release per the coordinated RELEASE-PROCESS.md in the GATE monorepo.

See also

• GATE framework paper
• W9 phase 0 and phase 1 planning documents have been relocated to v1.4/release-audit-trail/W9-PHASE-0.md and v1.4/release-audit-trail/W9-PHASE-1.md so the gate-knowledge bundle published at github.com/deterministic-agents/gate-knowledge carries only OKF concepts and project metadata. The relocation is a B9 finding from the post-closure independent review; see BUNDLE-REVIEW.md Post-handback corrections.
• CHANGELOG-v1.0.0.md - release notes
• BUNDLE-REVIEW.md - phase 2 closure summary and sealed-body sha256