Status
Supported
Network Gateway is an explicitly supported SHP platform.
Support is established by the applicable Active Network Gateway Platform Admission Record.
View the Network Gateway Platform Admission Record →
Platform support does not by itself mean that production certification signing is operational or that certification services are currently available.
Platform boundary
The Network Gateway platform boundary is defined by the admitted Network Gateway specification set.
Certification claims must remain within that defined boundary.
A device performing some routing, firewall, or gateway functions does not automatically fall within the SHP Network Gateway certification domain.
Admitted specification set
Network Gateway certification is governed by the applicable SHP core specifications together with the admitted Network Gateway-specific specification set.
That set includes:
- Network Gateway Threat Model
- Network Gateway Platform Mathematics Specification
- Network Gateway Tier 1 Full Control Catalogue
- Network Gateway Tier 2 Full Control Catalogue
- Network Gateway Tier 3 Full Control Catalogue
- Network Gateway Platform Admission Record
The applicable versions of those artefacts define the Network Gateway certification context.
Browse the SHP Specification Library →
Network Gateway tiers
Network Gateway currently has defined control catalogues for:
- Tier 1
- Tier 2
- Tier 3
Those tiers are Network Gateway-specific governed hardening postures.
They must not be interpreted as equivalent to the same numbered tiers on Fedora, Wi-Fi, or another SHP platform.
Threat model first
Network Gateway controls derive their meaning from the applicable Network Gateway threat model.
The threat model defines the security boundary within which the platform controls and certification claims operate.
Certification must not be interpreted as protection against threats outside that defined scope.
Verification
Network Gateway certification is based on structured verification of observed state.
Verification must follow the applicable Network Gateway controls and the SHP verification model.
Applicable Non-Negotiable Controls remain hard certification gates.
They cannot be bypassed through bounded certification or discretionary judgement.
Certification
Network Gateway certification is:
- device-bound
- state-bound
- specification-bound
- time-bounded
It is derived from eligible verification results and issued only under SHP-controlled certification authority.
Certification does not mean that compromise is impossible.
It does not survive arbitrary material state change.
An expired or revoked certification is not active certification.
Understand SHP Certification →
Signing readiness
Formal Network Gateway platform support and production certification signing readiness are separate states.
Platform Support means Network Gateway has been formally admitted under SHP governance.
Certification Signing Readiness means the required operational trust infrastructure exists for issuing Network Gateway certification artefacts.
Service Availability means those certification services are actually being offered.
None of these states should be inferred from another.
Platform independence
Network Gateway remains structurally independent from other SHP platforms.
Network Gateway controls, tier semantics, threat coverage, and certification meaning must not be transferred automatically to Fedora, Wi-Fi, or another technical domain.