Worst-Case Bounds for Gaussian Process Models