Software Supply Chain Transparency Log

Vera is a trust protocol, acting as the transparency log for the Source ecosystem

Tamper-evident tracing, policy gates and cross-checks for AI agents: see what the agent did, and why.

emem is the machine-maintained, external memory of our physical world a.k.a. Satellites for AI.

verify https assets with a public transparency log

Signature Transparency Log designed for ease of use, low cost, and minimal maintenance

keep tabs on Go modules

🥸 Experimental p2p gossip network for OpenPGP signature transparency 🥸

A collection of open source tlog tooling.

PHP Implementation of the Public Key Directory Server

Transparenty Immutable Container Image Tags

Secure, auditable agent-to-agent communication framework

Cryptographic, immutable, append only software release ledger.

The open-source Agent Decision Record: every decision signed, chained and provable.

Open specification and reference verifiers for Seal records: ATTESTATION-v1 for AI model calls, ACTION-v1 for agent actions, and GRANT-v1 approvals (draft). Ed25519, canonical JSON, checked offline against a published key.

Proof of what your AI agents did: signed receipts for every tool call, Cedar policy at an MCP gateway, a tamper-evident log, and a browser verifier

Verifiable agent actions. Every action becomes signed context for the next. Ed25519 signatures, Merkle log proofs, independently verifiable by anyone.

A very simple certificate transparency log scraper for a very specific use case.

Build durable, auditable AI agents in Go: at-most-once side effects, offline-verifiable cryptographic audit (RFC 6962), and provably convergent state. A library, not a cluster.

kernel.org transparency log monitor