On-chain reference

pub fn require_current(
    access_pass: &AccountInfo,
    policy: &AccountInfo,   // pin it: #[account(address = POLICY)]
    user: &AccountInfo,     // must sign
) -> Result<GrantedAccess, ProgramError>

pub const POLICY: Pubkey = pubkey!("YOUR_POLICY_ADDRESS");

pub fn deposit(ctx: Context<Deposit>, amount: u64) -> Result<()> {
    stele_gate::require_current(&ctx.accounts.access_pass, &ctx.accounts.policy, &ctx.accounts.user)?;
    // … the protected action
    Ok(())
}

pub fn require_policies(
    required: &[Pubkey],        // YOUR pinned list
    accounts: &[AccountInfo],   // [policy, access_pass, …] — e.g. ctx.remaining_accounts
    user: &AccountInfo,
) -> Result<Vec<GrantedAccess>, ProgramError>

pub fn require_all_current(
    requirements: &[(&AccountInfo, &AccountInfo)],   // (access_pass, policy)
    user: &AccountInfo,
) -> Result<Vec<GrantedAccess>, ProgramError>

pub fn access_pass_address(document: &Pubkey, holder: &Pubkey) -> (Pubkey, u8)
pub fn policy_address(document: &Pubkey) -> (Pubkey, u8)

pub struct GrantedAccess {
    pub organization: Pubkey, pub document: Pubkey, pub version: Pubkey,
    pub version_number: u32, pub version_hash: [u8; 32], pub required_version: u32,
    pub acceptance_id: [u8; 32],   // the Proof receipt of this acceptance
    pub accepted_at: i64,
}

seeds: ["policy", document]                 157 bytes
8   organization            40  document
72  required version hash   104 updated_by
152 required version (u32) 156 bump

seeds: ["access-pass", document, wallet]      233 bytes
8   organization            40  document
72  holder (the wallet)     104 accepted version
136 version hash            168 acceptance_id
200 accepted_at (i64)       224 version number (u32)
232 bump

findAccessPassPda(document: Address, holder: Address): Promise<[Address, number]>
findPolicyPda(document: Address): Promise<[Address, number]>

decodeGatePolicy(data: Uint8Array): GatePolicyAccount   // { document, requiredVersion, … }
decodeAccessPass(data: Uint8Array): AccessPassAccount   // { holder, versionNumber, … }

const rpc = createRpc("https://api.devnet.solana.com");
const policy = decodeGatePolicy((await fetchAccountData(rpc, POLICY))!);
const [pass] = await findAccessPassPda(policy.document, wallet);
const data = await fetchAccountData(rpc, pass);
const status = !data ? "MISSING"
  : decodeAccessPass(data).versionNumber >= policy.requiredVersion ? "VALID" : "OUTDATED";