GitCover Body of Knowledge (GCBoK)
The normative reference work for Git-native compliance
GitCover is not a tool for compliance enthusiasts. It is infrastructure for everyone who wants to get compliance done — as cheaply, as securely, as provably as possible.
The GitCover Body of Knowledge (GCBoK) is a normative reference work that canonizes terminology, concepts, and architectural principles for Git-native compliance. It is comparable to PMBOK (Project Management), SWEBOK (Software Engineering), and DMBOK (Data Management) — but with its own conceptual framework.
Positioning
| Characteristic | Value |
|---|---|
| Type | Body of Knowledge (BoK) — normative |
| Model | ISO/IEC 24773 (BoK structure as basis for certification schemes) |
| Operator | GitCover Commons gUG (GCC) — non-profit |
| License | Target: CC BY-SA 4.0 |
| Versioning | Git (git.gitcover.org) — Git-native self-referential |
| URL | gcbok.org (production) / gcbok.gitcover.org (staging) |
Three-Layer Model
GCBoK is part of a three-layer naming model:
- GCBoK (normative terminology authority) — definitions, concepts, architectural principles
- GCCom (GitCover Compendium) — communication and docs frontend
- GCRef (GitCover Reference) — Machine-readable layer (OSCAL catalogs, OPA rule sets)
Seven Axes
GCBoK is structured along seven chapter axes:
| Axis | Topics |
|---|---|
| Fundamentals | Git-native compliance, compliance as infrastructure, GoBD, NIS2, BSI GS++, GDPR, application understanding |
| Concepts | V7GUID, evidence chains, Cryptographic Evidence Chain, deterministic branching |
| Components | GCDMS, GCPN, GCUCB, GCEP, GCSYNC, GCAL |
| Techniques | OSCAL, OPA/Rego, GPG signing, uuidV7, Git as IdP |
| Procedures | SME onboarding, Compliance City, tenant isolation, .gitcover/ structure, issue archiving, audit readiness, GoBD year-end close, NIS2 risk analysis, AI server integration, share frontends |
| Templates | OSCAL catalog template, OPA policy template, V7GUID schema, DMS container template |
| Governance | GCC charter, community rules, amendment procedures, versioning |
Note: The non-profit operator GitCover Commons gUG (GCC), charter, donations, and activities are documented on the GCC page. GCBoK itself is the knowledge and reference work.