dsse

Free DSSE Attestation Online Decoder Tool

Modular attestation monorepo for cilock — 30+ attestors, 9 signers, the rookery builder for custom binaries. The source of the cilock CLI.

Conformance corpora and reference verifiers for AI-agent and supply-chain evidence formats

Signed, tamper-evident receipts of every AI agent execution: what ran, where, when, with what. Verifiable offline or with cosign.

GitHub Actions and GitLab CI integration for cilock — wrap any command or downstream action and emit a signed in-toto attestation.

Secure Firecracker microVM runtime for AI-generated code: policy checks, secret broker, signed receipts.

Archived: moved to probityai/agent-evidence-vectors/crates/dsse

Cryptographic attestation framework for LLM supply-chain security, tamper-evident provenance for prompts, training data, evaluations, routing, and SLOs with Sigstore keyless signing, OCI distribution, and OPA policy enforcement

Recipe, gate, and report layer for canonical Assay evidence artifacts: DSSE recipes, replayable digest-bound packs, CI gates.

Tamper-evident, cryptographically signed audit ledger for AI/LLM outputs. DSSE envelopes, RFC 6962 Merkle proofs, OPA policy-as-code, JWT multi-tenant auth. Go server + Python & TypeScript SDKs.

Signed, content-free evidence of how your AI system runs: one-line SDKs, an open-source evidence agent with local mode, and verifiers for AI evidence packs.

Signed, tamper-evident receipts of every AI agent execution: what ran, where, when, with what. Verifiable offline or with cosign.

Land AI-written code with no pull request to review. Agents declare a plan; 05 checks the result on the exact code, signs the evidence, and keeps several agents from stepping on each other.

a11oy — governed-AI Command Center. Deny by default. Signed receipts. Trust ceiling 0.97. Λ = Conjecture 1.

Protocol contract checks for MCP servers, the canonicalizer and schema behind MCP Checkup's signed attestations, and an offline verifier.

SZL Living Anatomy — 3D navigable governed-AI organ substrate. Visualizes the 5 organs (reasoning cortex, trust gate, receipt bus, consensus, egress) powering a11oy + killinchu. Doctrine v11 LOCKED · 8 proven formulas · Λ = Conjecture 1.

Proof-carrying CI prototype: reuse a signed, policy-bound pre-push verification run as a GitHub check, or fail closed to ordinary CI

Wrap any LLM guardrail (Llama-Guard / NeMo / guardrails-ai / your callable) and emit a signed, hash-chained DSSE decision receipt — aligned with governed-receipt-spec. UNSIGNED-honest fallback; never fabricates a signature, energy joule, or a Λ 'proven'.

Agent-only x402 service for signed exact-commit evidence on public Agent Skills

Core Idea Aegis Forge = autonomous CI/CD repair system that fixes failed GitHub workflows and provides independent proof that the fix works. Core Security Principles Never execute untrusted code directly on host Sandbox all repository execution No unnecessary repository secrets Repair Agent ≠ Independent Verifier Reject patches