Seven composable gates and a hash-linked receipt chain. The deterministic runtime that CB-12, SDM, and the WHL Optimizer Platform are all built on. 696/3 tests passing. Available under private licensing only — this is the moat, not the loss leader.
Every gate is a pure evaluator with a typed verdict. Gates compose into pipelines. Every evaluation emits a hash-linked receipt. AI may propose; only the gates authorize. This is the substrate under every product Werner Harmonic Labs ships.
The non-negotiables. Hard refusals encoded as rules the rest of the stack cannot override. If a request fails the NullEngine, no downstream gate gets the chance to allow it.
Evaluates whether the proposed action is reversible. Irreversible operations face a higher bar than reversible ones. The gate that asks "will we regret this and be unable to undo it?" before the action lands.
Spectral fingerprint and coherence scoring. The gate that detects when the system, the model, or the signal is no longer behaving like the calibrated baseline. Powers SDM at the product layer.
Multi-perspective deliberation with a sentinel veto on coherence below threshold. The gate that runs the full deliberation pipeline before a high-stakes action is allowed through. Verified live: coherence below 0.5 → DENY.
Geometric drift detection over covariance structure. Benign warp 0.218 → ALLOW. Drift warp 1.000 → DENY. 27 unit tests pass. The gate that catches the model whose latent geometry has quietly bent.
The canonical entry point. An ExecutionProposal and EvidenceBundle go in, a typed verdict and a signed receipt come out. The schema that every other gate consumes and the contract every product layer implements.
Chain gates into pipelines with explicit AND / OR / quorum semantics. The composition primitive that lets a product define its own admissibility logic without rewriting the underlying gates.
The doctrine is simple. Generative systems produce proposals. The Governance SDK is the deterministic runtime that decides whether a proposal becomes an action. Every gate is unit-tested. Every evaluation is hash-linked into the receipt chain. The same SDK powers a compliance appliance, a drift monitor, and a GPU attestation product — because they all need the same property: a verdict you can verify.
The SDK is the moat. Licensed partners get the source-available distribution, a private package index, and integration support. Build your product on top of the same runtime CB-12 and SDM run on.
One deterministic core. Multiple regulated-buyer products. Each product is a SKU; the SDK is the platform. The composability is the multiplier — and the gates are covered by the 25-patent provisional family.
On-prem licensing with HSM-bound receipt keys. The full source-available distribution under a sovereignty addendum. The same gates, your hardware, your auditor.
The Governance SDK is not on PyPI, npm, or any public package index — and it never will be. The gates and the receipt-chain construction are the IP under the products. Access is through a signed licensing agreement.
The SDK conversation is with the teams that need the deterministic substrate, not the surface product.
Governance SDK test suite. All seven gates verified.
$ pytest -v
collected 699 items
...
tests/test_alre_gate.py::test_spectral_coherence_pass PASSED
tests/test_alre_gate.py::test_spectral_coherence_fail PASSED
tests/test_hce_gate.py::test_council_veto PASSED
tests/test_ricci_warp_gate.py::test_benign_warp_allows PASSED
tests/test_ricci_warp_gate.py::test_drift_warp_denies PASSED
tests/test_null_engine.py::test_hard_no_rules PASSED
tests/test_time_asymmetric.py::test_future_regret_check PASSED
tests/test_proposal_gate.py::test_composite_and_semantics PASSED
...
================== 696 passed, 3 skipped in 8.92s ==================
Verified live: 696 pass, 3 skipped (platform-specific). Includes 27 new Ricci-Warp tests, 40 ALRE+HCE tests, full composability of all 7 gates.
Licensing inquiries are reviewed on a per-partner basis. Each engagement starts with an NDA, a technical deep-dive on the seven gates and the receipt chain, and a patent-family disclosure. Pricing is structured against the deployment, not a public price list.