dsse

Free DSSE Attestation Online Decoder Tool

Modular attestation monorepo for cilock — 30+ attestors, 9 signers, the rookery builder for custom binaries. The source of the cilock CLI.

Conformance corpora and reference verifiers for AI-agent and supply-chain evidence formats

Signed, tamper-evident receipts of every AI agent execution: what ran, where, when, with what. Verifiable offline or with cosign.

GitHub Actions and GitLab CI integration for cilock — wrap any command or downstream action and emit a signed in-toto attestation.

Rust library that signs and verifies DSSE envelopes, the signing format of in-toto and Sigstore records, with explicit threshold and key handling.

Cryptographic attestation framework for LLM supply-chain security, tamper-evident provenance for prompts, training data, evaluations, routing, and SLOs with Sigstore keyless signing, OCI distribution, and OPA policy enforcement

Recipe, gate, and report layer for canonical Assay evidence artifacts: DSSE recipes, replayable digest-bound packs, CI gates.

Tamper-evident, cryptographically signed audit ledger for AI/LLM outputs. DSSE envelopes, RFC 6962 Merkle proofs, OPA policy-as-code, JWT multi-tenant auth. Go server + Python & TypeScript SDKs.

Signed, content-free evidence of how your AI system runs: one-line SDKs, an open-source evidence agent with local mode, and verifiers for AI evidence packs.

Signed, tamper-evident receipts of every AI agent execution: what ran, where, when, with what. Verifiable offline or with cosign.

SZL Living Anatomy — 3D navigable governed-AI organ substrate. Visualizes the 5 organs (reasoning cortex, trust gate, receipt bus, consensus, egress) powering a11oy + killinchu. Doctrine v11 LOCKED · 8 proven formulas · Λ = Conjecture 1.

Proof-carrying CI prototype: reuse a signed, policy-bound pre-push verification run as a GitHub check, or fail closed to ordinary CI

Wrap any LLM guardrail (Llama-Guard / NeMo / guardrails-ai / your callable) and emit a signed, hash-chained DSSE decision receipt — aligned with governed-receipt-spec. UNSIGNED-honest fallback; never fabricates a signature, energy joule, or a Λ 'proven'.

a11oy — governed-AI Command Center. Deny by default. Signed receipts. Trust ceiling 0.97. Λ = Conjecture 1.

Agent-only x402 service for signed exact-commit evidence on public Agent Skills

Lockfile, provenance and capability policy for AI agent skills. Pin what your agent can do — and prove it. Zero runtime dependencies.

Dual-Server-Side-Encryption on AWS S3 objects/buckets

Build Sigstore bundles (.sigstore.json) in PHP — the counterpart to verification, emitting DSSE and message-signature bundles.

Detects real change in FedRAMP's machine-readable rules, schemas, and marketplace data, and emits a cryptographically signed .aion chain