Docs

Everything you need to consult Knowledge from your stack, wrap a business tool with signed authorization, or spin up an MCP proxy. Every page carries a maturity badge : [Stable] [Beta] [Experimental] [Roadmap].

Getting started

• What is Knowledge ? [Stable] - two minutes on the mental model and vocabulary.
• Quickstart : governed tool in Python [Stable] - five minutes hands-on with the @governed_tool decorator, from install to first signed verdict.
• Quickstart : MCP proxy in 5 minutes [Stable] - five minutes to insert the proxy in front of an existing MCP server and see enforcement fire on a tampered call.

Concepts

Deeper explanations of the core abstractions.

• Policies, rules and targets [Stable] - the three core aggregates.
• Verdicts and decisions [Stable] - severity ladder, precedence, Consultation record.
• Signed verdicts and PEP [Stable] - the JWS envelope, binding checks, spent-verdicts.
• Progressive context resolution [Stable] - the /resolve loop and dependency inversion.
• Overrides, approvals, pauses [Stable] - the three governed exception mechanisms.
• Four-actor trust model [Stable] - who signs, who verifies, what each edge guarantees.

API reference

• Authentication [Stable] - API keys, session cookies, principal binding.
• POST /v1/check [Stable] - deterministic verdict, strict context.
• POST /v1/resolve [Stable] - progressive verdict, tolerant context.
• GET /v1/tenants/{slug}/jwks [Stable] - JWKS for signature verification.
• GET /v1/consultations/{id} [Stable] - retrieve a Consultation record.
• /v1/approvals [Stable] - create, poll, decide.

Full OpenAPI spec at docs/api/openapi-v3.json in the monorepo. Postman collection : docs/api/postman/knowledge-v3.postman_collection.json.

SDK reference

• knowledge-runtime (Python) [Stable] - @governed_tool, verify_verdict, JWKS cache, guard-rails.
• TypeScript SDK [Roadmap] - feature parity with Python planned for Q4-2026.

MCP proxy

• Setup [Stable] - insert the proxy in front of any MCP server.
• Config reference [Stable] - every knob in proxy.yaml.
• Deployment modes [Stable] - stdio, sidecar, shared.

Guides

• Rotate signing keys [Stable] - scheduled + emergency rotation.
• Multi-tenant setup [Stable] - run multiple tenants on one deployment.
• Bring your own tools to MCP proxy [Stable] - fetcher registry + policy mapping.
• Migrate from advisory to enforcement [Stable] - the three-stage playbook.
• Emergency response [Stable] - kill switch, key rotation, downgrade.

Security + compliance

• Trust model deep dive [Stable] - four-actor chain, edge-by-edge threats.
• Keys inventory [Stable] - all four cryptographic keys, storage, rotation.
• Deployment shapes [Stable] - SaaS, VPC, on-prem trade-offs.
• Compliance posture [Stable] - certifications, residency, retention, threat model.

---

Send feedback to contact@asplenz.com.