gatecore-sdk

gatecore-sdk is GateCore's Python client SDK. It builds a GateCore interaction request, signs it with an Ed25519 private key, and submits it to a GateCore gateway for governed execution. The SDK contains transport and signing only; GateCore services enforce identity, policy, trust, provenance, pricing, funding, delegation, and settlement.

Install from the GateCore monorepo

python -m pip install -e ./libs/sdk

Usage

from gatecore_sdk import GateCoreClient

client = GateCoreClient("https://api.example.com", bearer_token="...")

req = client.build_request(
    origin_entity_id="agent:example",
    target_type="tool",
    target_id="example-tool",
    operation="tool_call",
    payload={"query": "example"},
)
signed = client.sign_request(req, private_key_pem=open("/secure/path/agent-key.pem").read())
decision = client.execute(signed)

build_request auto-attaches provenance.payload_sha256, matching the provenance engine's legacy hash domain (json.dumps(payload, sort_keys=True), default separators). Hand-rolled clients may use either that form or the compact canonical form (separators=(",", ":")); the provenance service accepts both as of 2026-08-17. sign_request signs the canonical request payload with an Ed25519 private key (PEM, PKCS8). mediate() builds, optionally signs, and posts to /v1/mediate in one call; execute() posts an already-signed request to /v1/execute.

Note on internal module layout

The SDK's signing/transport implementation lives at gatecore_sdk._common (private — not part of the public API; import GateCoreClient from gatecore_sdk directly, as shown above). An earlier working copy of this package exposed the same code as a separate top-level gatecore_common module. That name was never published to PyPI, so this rename has no external-consumer impact; it exists to avoid a published package claiming a second, overly generic top-level import name (gatecore_common) alongside gatecore_sdk.