Quipu 把治理直接做进存储层，门控、双时态、可审计都是内置的，适合搞多智能体写知识图谱的人看看。
Quipu 是一个可嵌入的知识图谱存储，要求每条事实必须通过治理门控，门控谓词评估待写入的后状态。数据、信任标签、裁决和规则本身都是双时态的，命名图作为权威和信任单位，在格下组合且组合不扩大。在 Census 基准上，门控存储 0/6 种植入缺陷，未门控 6/6；50/50 满意裁决按时间点正确重推导，最新规则集下全部误报。在 DEMM-Bench 上，内容读取回答全部 512 个属性级问题且零过度声明，容器存在基线最多过度声明 87.5%。
Quipu: A Governed Bitemporal Knowledge Graph Store
Agents now write knowledge graphs, but knowledge-graph stores still carry defaults set when humans curated them: accept writes now and clean later, keep one time axis or none, treat every writer's facts as equally trustworthy, and leave governance to dashboards and middleware. These four defaults are individually convenient and jointly untenable under agent workloads. We present Quipu, an embeddable store that inverts all four: no fact enters except through a gate whose predicates evaluate the pending post-state; data, trust labels, verdicts, and the rules themselves are bitemporal; named graphs are the unit of authority and trust, composed under a lattice whose one invariant is that composition never widens; and the governance specification $Σ$, the trace, and signed verdicts are facts in the store they govern, making the audit $T \models Σ$ a query. We evaluate with Census, a deterministic multi-writer lifecycle whose single seeded run scores every research question against planted ground truth: the gated store ends with 0 of 6 planted defects versus 6 of 6 ungated; all 7 composition probes uphold the lattice contract; 50 of 50 satisfied verdicts re-derive faithfully as of their instant while all 50 would be misreported under a latest-only rule set; and the SARC reference checker agrees with the in-store audit verdict-for-verdict, differing only on coverage semantics. A recorded trace from a governed writer surfaces a live enforcement gap the audit names with its remediation. On DEMM-Bench, an external decision-evidence sufficiency benchmark, a content-only reading of the exported records answers all 512 property-level governance questions correctly with zero overclaim under all eight degradation conditions, while container-presence baselines overclaim on up to 87.5% of them -- and the run surfaced, and led us to close, a gap in what a denial's verdict attests.