{
  "rows": [
    {
      "id": "guard-kernel",
      "canonical": "guard (fak guard kernel)",
      "family": "guard-gate",
      "kind": "subsystem",
      "definition": "The kernel itself: the in-process adjudication system that runs the decision chain and admits results, launched as `fak guard`.",
      "distinction": "A SYSTEM - NOT a gate (one decision point inside it) and NOT the trunk/repo guards (git-side policy checks).",
      "distinct_from": ["gate", "trunk-guard", "repo-guard"],
      "aliases": ["fak guard"],
      "grounding": "guard",
      "grounding_kind": "path",
      "glossary_anchor": "docs/fak/concept-glossary.md",
      "parent": "",
      "verdict": "crystal",
      "gaps": []
    },
    {
      "id": "gate",
      "canonical": "gate (decision point)",
      "family": "guard-gate",
      "kind": "concept",
      "definition": "One decision point inside a guard, splitting by WHEN it fires: pre-call adjudicators, post-call result admitters, and git-hook gates.",
      "distinction": "A POINT, not the system - NOT the guard (the whole kernel) and NOT any single gate kind (adjudicator vs admitter vs hook).",
      "distinct_from": ["guard-kernel", "result-admitter", "git-hook-gate"],
      "aliases": [],
      "grounding": "gate",
      "grounding_kind": "symbol",
      "glossary_anchor": "docs/fak/concept-glossary.md",
      "parent": "",
      "verdict": "crystal",
      "gaps": []
    },
    {
      "id": "result-admitter",
      "canonical": "ResultAdmitter (post-call gate)",
      "family": "guard-gate",
      "kind": "symbol",
      "definition": "A post-call gate: inspects a tool RESULT after execution and admits / quarantines / transforms it (ctxmmu, normgate, secretgate).",
      "distinction": "Fires POST-call on result bytes - NOT the adjudicator (pre-call, on the request) and NOT a git-hook gate (commit boundary).",
      "distinct_from": ["adjudicator", "gate"],
      "aliases": [],
      "grounding": "resultadmitter",
      "grounding_kind": "symbol",
      "glossary_anchor": "docs/fak/concept-glossary.md",
      "parent": "gate",
      "verdict": "crystal",
      "gaps": []
    },
    {
      "id": "git-hook-gate",
      "canonical": "git-hook gate",
      "family": "guard-gate",
      "kind": "subsystem",
      "definition": "A commit-boundary check at git pre-commit / commit-msg (gate_brokenlink, gate_secretshape, gate_provenance, ...).",
      "distinction": "A STATIC commit-boundary check - NOT gitgate (a runtime git-command prefilter) and NOT a result admitter (post-tool).",
      "distinct_from": ["gitgate", "gate"],
      "aliases": ["gatebrokenlink"],
      "grounding": "gatebrokenlink",
      "grounding_kind": "path",
      "glossary_anchor": "docs/fak/concept-glossary.md",
      "parent": "gate",
      "verdict": "crystal",
      "gaps": []
    },
    {
      "id": "trunk-guard",
      "canonical": "trunk guard",
      "family": "guard-gate",
      "kind": "doc-term",
      "definition": "A git hook that refuses commits made off the trunk (the OFF_TRUNK law), keeping all work on main.",
      "distinction": "A branch-STATE policy (refuse OFF_TRUNK) - NOT repo guard (write-target policy) and NOT gitgate (git-command prefilter).",
      "distinct_from": ["repo-guard", "gitgate", "guard-kernel"],
      "aliases": ["offtrunk"],
      "grounding": "offtrunk",
      "grounding_kind": "claims",
      "glossary_anchor": "docs/fak/concept-glossary.md",
      "parent": "",
      "verdict": "crystal",
      "gaps": []
    },
    {
      "id": "repo-guard",
      "canonical": "repo guard (repoguard)",
      "family": "guard-gate",
      "kind": "subsystem",
      "definition": "A PreToolUse hook that refuses Bash/Write/Edit calls targeting paths outside the workspace tree.",
      "distinction": "A write-TARGET policy (block escaping the tree) - NOT trunk guard (branch state) and NOT gitgate (git subcommands).",
      "distinct_from": ["trunk-guard", "gitgate"],
      "aliases": ["repoguard"],
      "grounding": "repoguard",
      "grounding_kind": "path",
      "glossary_anchor": "docs/fak/concept-glossary.md",
      "parent": "",
      "verdict": "crystal",
      "gaps": []
    },
    {
      "id": "gitgate",
      "canonical": "gitgate (adjudicator)",
      "family": "guard-gate",
      "kind": "subsystem",
      "definition": "An adjudicator rung that prefilters git hazards (force-push, --no-verify, rebase -i) from shell tool calls at runtime.",
      "distinction": "A runtime git-COMMAND prefilter - NOT git-hook gates (static commit-boundary checks) and NOT trunk guard (branch state).",
      "distinct_from": ["git-hook-gate", "trunk-guard"],
      "aliases": [],
      "grounding": "gitgate",
      "grounding_kind": "path",
      "glossary_anchor": "docs/fak/concept-glossary.md",
      "parent": "",
      "verdict": "crystal",
      "gaps": []
    },
    {
      "id": "shipgate",
      "canonical": "shipgate (RSI promotion gate)",
      "family": "guard-gate",
      "kind": "subsystem",
      "definition": "An adjudicator that enforces RSI keep-or-revert verdicts on a code change based on witness-verified metric gain, never the candidate's own claim.",
      "distinction": "Gates a CODE improvement on proven gain - NOT an L3 cache promotion gate (durability class) and NOT a result-admitter gate.",
      "distinct_from": ["gate", "result-admitter"],
      "aliases": [],
      "grounding": "shipgate",
      "grounding_kind": "path",
      "glossary_anchor": "docs/fak/concept-glossary.md",
      "parent": "",
      "verdict": "crystal",
      "gaps": []
    },
    {
      "id": "normgate",
      "canonical": "normgate (result admitter)",
      "family": "guard-gate",
      "kind": "subsystem",
      "definition": "A ResultAdmitter that canonicalizes obfuscated payloads (base64, homoglyph, zero-width) before re-scanning for secrets.",
      "distinction": "Detection-CLOSURE (decode then detect) - NOT secretgate (discovery-classification) and NOT ctxmmu (generic quarantine).",
      "distinct_from": ["secretgate", "context-mmu"],
      "aliases": [],
      "grounding": "normgate",
      "grounding_kind": "path",
      "glossary_anchor": "",
      "parent": "result-admitter",
      "verdict": "defined",
      "gaps": ["the individual result-admitter rungs are not yet written into the glossary"]
    },
    {
      "id": "secretgate",
      "canonical": "secretgate (result admitter)",
      "family": "guard-gate",
      "kind": "subsystem",
      "definition": "A ResultAdmitter that classifies discovered credentials as RESULT_SECRET_DISCOVERED events, distinct from injection poisoning.",
      "distinction": "Discovery-CLASSIFICATION (mark credentials) - NOT normgate (detection-closure) and NOT ctxmmu (generic quarantine).",
      "distinct_from": ["normgate", "context-mmu"],
      "aliases": [],
      "grounding": "secretgate",
      "grounding_kind": "path",
      "glossary_anchor": "",
      "parent": "result-admitter",
      "verdict": "defined",
      "gaps": ["the individual result-admitter rungs are not yet written into the glossary"]
    },
    {
      "id": "stampgate",
      "canonical": "StampGate (source-stamp result gate)",
      "family": "guard-gate",
      "kind": "symbol",
      "definition": "A rank-20 ResultAdmitter that stamps every tool result's taint by SOURCE (trusted-local vs untrusted-egress) and clamps the result's ShareScope DOWNWARD.",
      "distinction": "A CONTROL-PLANE adjudication gate (taint by origin) - NOT a model gating WEIGHT (mlp.gate_proj et al.) and NOT the upward ScopeCeilingGate ceiling.",
      "distinct_from": ["result-admitter", "scopeceilinggate", "mlp-gate-proj"],
      "aliases": [],
      "grounding": "StampGate",
      "grounding_kind": "symbol",
      "glossary_anchor": "docs/fak/concept-glossary.md",
      "parent": "result-admitter",
      "verdict": "crystal",
      "gaps": []
    },
    {
      "id": "scopeceilinggate",
      "canonical": "ScopeCeilingGate (scope-ceiling result gate)",
      "family": "guard-gate",
      "kind": "symbol",
      "definition": "The result-side ShareScope CEILING gate (rank 21, above StampGate): confines cross-agent taint visibility to the declared scope boundary - the upward dual of StampGate's downward clamp.",
      "distinction": "A CONTROL-PLANE adjudication gate (scope ceiling) - NOT a model gating projection and NOT StampGate (the downward source-stamp clamp).",
      "distinct_from": ["stampgate", "result-admitter", "q-gate-proj"],
      "aliases": [],
      "grounding": "ScopeCeilingGate",
      "grounding_kind": "symbol",
      "glossary_anchor": "docs/fak/concept-glossary.md",
      "parent": "result-admitter",
      "verdict": "crystal",
      "gaps": []
    },
    {
      "id": "sinkgate",
      "canonical": "SinkGate (egress adjudicator)",
      "family": "guard-gate",
      "kind": "symbol",
      "definition": "The egress adjudicator that DENIES a tool call whose arguments carry untrusted taint into a configured sink, governed by a GatedSinks policy.",
      "distinction": "A CONTROL-PLANE pre-dispatch adjudicator (deny tainted args into a sink) - NOT a model gating weight and NOT StampGate (the post-call result stamp).",
      "distinct_from": ["stampgate", "gate", "ffn-gate"],
      "aliases": [],
      "grounding": "SinkGate",
      "grounding_kind": "symbol",
      "glossary_anchor": "docs/fak/concept-glossary.md",
      "parent": "gate",
      "verdict": "crystal",
      "gaps": []
    },
    {
      "id": "sealed-by-trust-gate",
      "canonical": "sealed_by_trust_gate (trust-gate refusal)",
      "family": "guard-gate",
      "kind": "doc-term",
      "definition": "A trust-gate REFUSAL REASON code: a context page that is sealed/tombstoned cannot be demand-paged back in.",
      "distinction": "A refusal REASON string emitted by the context trust gate - NOT a gate TYPE you configure and NOT a model gating tensor.",
      "distinct_from": ["sinkgate", "gate", "mlp-gate-proj"],
      "aliases": [],
      "grounding": "sealed_by_trust_gate",
      "grounding_kind": "symbol",
      "glossary_anchor": "docs/fak/concept-glossary.md",
      "parent": "",
      "verdict": "crystal",
      "gaps": []
    },
    {
      "id": "strict-gated-sinks",
      "canonical": "StrictGatedSinks (strict egress-sink policy)",
      "family": "guard-gate",
      "kind": "config",
      "definition": "The Policy preset that gates ALL egress sinks strictly: the GatedSinks configuration the SinkGate adjudicator enforces.",
      "distinction": "A POLICY preset (data the SinkGate reads) - NOT the SinkGate adjudicator itself and NOT a model gating weight.",
      "distinct_from": ["sinkgate", "mlp-gate-proj"],
      "aliases": [],
      "grounding": "StrictGatedSinks",
      "grounding_kind": "symbol",
      "glossary_anchor": "docs/fak/concept-glossary.md",
      "parent": "",
      "verdict": "crystal",
      "gaps": []
    },
    {
      "id": "mlp-gate-proj",
      "canonical": "mlp.gate_proj (FFN gate projection)",
      "family": "guard-gate",
      "kind": "symbol",
      "definition": "The FFN/SwiGLU GATE projection weight in an MLP layer; after SiLU it is multiplied with up_proj, distinct from down_proj.",
      "distinction": "A NEURAL-NET FFN gating WEIGHT (SwiGLU) - NOTHING to do with adjudication gates (StampGate/SinkGate); distinct from gate_up_proj (the fused gate+up).",
      "distinct_from": ["stampgate", "gate-up-proj", "sinkgate"],
      "aliases": ["gate_proj"],
      "grounding": "gate_proj",
      "grounding_kind": "symbol",
      "glossary_anchor": "docs/fak/concept-glossary.md",
      "parent": "",
      "verdict": "crystal",
      "gaps": []
    },
    {
      "id": "q-gate-proj",
      "canonical": "q_gate_proj (linear-attn query gate)",
      "family": "guard-gate",
      "kind": "symbol",
      "definition": "Qwen3.5 linear-attention QUERY gating projection (self_attn.q_gate_proj) in Gated-DeltaNet layers; the in_proj_z source absorbs it.",
      "distinction": "A NEURAL-NET attention gating WEIGHT (Gated-DeltaNet query gate) - NOT an adjudication gate and NOT the FFN mlp.gate_proj.",
      "distinct_from": ["mlp-gate-proj", "stampgate", "attn-output-gate"],
      "aliases": [],
      "grounding": "q_gate_proj",
      "grounding_kind": "symbol",
      "glossary_anchor": "docs/fak/concept-glossary.md",
      "parent": "",
      "verdict": "crystal",
      "gaps": []
    },
    {
      "id": "gate-up-proj",
      "canonical": "gate_up_proj (fused SwiGLU gate+up)",
      "family": "guard-gate",
      "kind": "symbol",
      "definition": "The FUSED gate+up projection (mlp.gate_up_proj.weight): gate_proj and up_proj concatenated into one tensor the loader splits.",
      "distinction": "A NEURAL-NET fused FFN gate+up weight the loader splits into gate_proj and up_proj - NOT an adjudication gate and NOT the standalone mlp.gate_proj.",
      "distinct_from": ["mlp-gate-proj", "ffn-gate", "stampgate"],
      "aliases": ["suffixGateUpProj"],
      "grounding": "gate_up_proj",
      "grounding_kind": "symbol",
      "glossary_anchor": "docs/fak/concept-glossary.md",
      "parent": "",
      "verdict": "crystal",
      "gaps": []
    },
    {
      "id": "ffn-gate",
      "canonical": "ffn_gate (GGUF FFN gate tensor)",
      "family": "guard-gate",
      "kind": "symbol",
      "definition": "The GGUF tensor name for the FFN gate weight (ffn_gate.weight), canonicalized to mlp.gate_proj.weight on load.",
      "distinction": "The GGUF spelling of the FFN gate weight (loads to mlp.gate_proj) - NOT an adjudication gate; the same model gate as mlp.gate_proj under llama.cpp naming.",
      "distinct_from": ["mlp-gate-proj", "gate-up-proj", "stampgate"],
      "aliases": [],
      "grounding": "ffn_gate",
      "grounding_kind": "symbol",
      "glossary_anchor": "docs/fak/concept-glossary.md",
      "parent": "",
      "verdict": "crystal",
      "gaps": []
    },
    {
      "id": "attn-output-gate",
      "canonical": "AttnOutputGate (attention output-gate flag)",
      "family": "guard-gate",
      "kind": "config",
      "definition": "A Qwen3.5 CONFIG flag (attn_output_gate) enabling a sigmoid GATE on full-attention output logits.",
      "distinction": "A MODEL CONFIG flag toggling sigmoid gating of attention output - NOT an adjudication gate and NOT a gating WEIGHT tensor like q_gate_proj.",
      "distinct_from": ["q-gate-proj", "stampgate", "rmsnorm-gated"],
      "aliases": [],
      "grounding": "AttnOutputGate",
      "grounding_kind": "symbol",
      "glossary_anchor": "docs/fak/concept-glossary.md",
      "parent": "",
      "verdict": "crystal",
      "gaps": []
    },
    {
      "id": "rmsnorm-gated",
      "canonical": "rmsNormGatedInPlace (gated RMSNorm)",
      "family": "guard-gate",
      "kind": "symbol",
      "definition": "The Qwen3.5 gated-RMSNorm compute (Qwen3_5RMSNormGated): x = weight * rmsnorm(x) * silu(gate), applied in place.",
      "distinction": "A NEURAL-NET gated-normalization COMPUTE (RMSNorm scaled by a SiLU gate) - NOT an adjudication gate and NOT a gating WEIGHT (it consumes one).",
      "distinct_from": ["attn-output-gate", "q-gate-proj", "stampgate"],
      "aliases": [],
      "grounding": "rmsNormGatedInPlace",
      "grounding_kind": "symbol",
      "glossary_anchor": "docs/fak/concept-glossary.md",
      "parent": "",
      "verdict": "crystal",
      "gaps": []
    },
    {
      "id": "foldedgate",
      "canonical": "FoldedGate (KV-MMU result gate)",
      "family": "guard-gate",
      "kind": "symbol",
      "definition": "The kvmmu gate that enforces the kernel's REGISTERED ResultAdmitter chain (most-restrictive-wins fold) over results before admitting them to the KV cache.",
      "distinction": "A RESULT-ADMISSION gate for KV-MMU - NOT a model gating weight and NOT the generic result-admitter interface (it's a concrete implementation).",
      "distinct_from": ["result-admitter", "stampgate", "mlp-gate-proj"],
      "aliases": [],
      "grounding": "FoldedGate",
      "grounding_kind": "symbol",
      "glossary_anchor": "docs/fak/concept-glossary.md",
      "parent": "result-admitter",
      "verdict": "crystal",
      "gaps": []
    },
    {
      "id": "defaultgatedsinks",
      "canonical": "DefaultGatedSinks (default egress-sink policy)",
      "family": "guard-gate",
      "kind": "config",
      "definition": "The reasonable default GatedSinks configuration: gates EGRESS (exfiltration) and DESTRUCTIVE (irreversible mutation) sinks on session taint, but NOT EXEC (preserves dev work).",
      "distinction": "A POLICY preset (data the SinkGate reads) - the REASONABLE default (less strict) vs StrictGatedSinks (untrusted-input threat model) - NOT the SinkGate adjudicator itself.",
      "distinct_from": ["strict-gated-sinks", "sinkgate", "mlp-gate-proj"],
      "aliases": [],
      "grounding": "DefaultGatedSinks",
      "grounding_kind": "symbol",
      "glossary_anchor": "docs/fak/concept-glossary.md",
      "parent": "",
      "verdict": "crystal",
      "gaps": []
    },
    {
      "id": "contractgate",
      "canonical": "ContractGate (contract validation gate)",
      "family": "guard-gate",
      "kind": "symbol",
      "definition": "A named validation checkpoint in an official run contract (browseraction/terminalbench/toolsandbox) that gates promotion: candidate_task_ids, official_harness_pin, same_task_ids_required, etc.",
      "distinction": "A CONTRACT CHECKPOINT (evidence validation) - NOT a kernel adjudicator gate and NOT a result-admitter gate - a pre-claim validation step in the RSI loop.",
      "distinct_from": ["gate", "shipgate", "result-admitter"],
      "aliases": [],
      "grounding": "ContractGate",
      "grounding_kind": "symbol",
      "glossary_anchor": "docs/fak/concept-glossary.md",
      "parent": "",
      "verdict": "crystal",
      "gaps": []
    },
    {
      "id": "guardrail",
      "canonical": "guardrail (safety boundary)",
      "family": "guard-gate",
      "kind": "concept",
      "definition": "A safety boundary or constraint that prevents an AI system from taking harmful actions; often implemented as policy checks or refusal reasons.",
      "distinction": "A SAFETY CONCEPT (the WHY) - NOT the kernel guard (the implementation) and NOT a specific gate (a decision point) - guardrails are the policy intent, gates are the enforcement mechanism.",
      "distinct_from": ["guard-kernel", "gate", "sinkgate"],
      "aliases": [],
      "grounding": "guardrail",
      "grounding_kind": "symbol",
      "glossary_anchor": "docs/fak/concept-glossary.md",
      "parent": "",
      "verdict": "crystal",
      "gaps": []
    }
  ]
}
