dsse

Free DSSE Attestation Online Decoder Tool

Modular attestation monorepo for cilock — 30+ attestors, 9 signers, the rookery builder for custom binaries. The source of the cilock CLI.

GitHub Actions and GitLab CI integration for cilock — wrap any command or downstream action and emit a signed in-toto attestation.

Cryptographic attestation framework for LLM supply-chain security, tamper-evident provenance for prompts, training data, evaluations, routing, and SLOs with Sigstore keyless signing, OCI distribution, and OPA policy enforcement

Recipe, gate, and report layer for canonical Assay evidence artifacts: DSSE recipes, replayable digest-bound packs, CI gates.

Tamper-evident, cryptographically signed audit ledger for AI/LLM outputs. DSSE envelopes, RFC 6962 Merkle proofs, OPA policy-as-code, JWT multi-tenant auth. Go server + Python & TypeScript SDKs.

Rust library that signs and verifies DSSE envelopes, the signing format of in-toto and Sigstore records, with explicit threshold and key handling.

SZL Living Anatomy — 3D navigable governed-AI organ substrate. Visualizes the 5 organs (reasoning cortex, trust gate, receipt bus, consensus, egress) powering a11oy + killinchu. Doctrine v11 LOCKED · 8 proven formulas · Λ = Conjecture 1.

Proof-carrying CI prototype: reuse a signed, policy-bound pre-push verification run as a GitHub check, or fail closed to ordinary CI

Wrap any LLM guardrail (Llama-Guard / NeMo / guardrails-ai / your callable) and emit a signed, hash-chained DSSE decision receipt — aligned with governed-receipt-spec. UNSIGNED-honest fallback; never fabricates a signature, energy joule, or a Λ 'proven'.

Agent-only x402 service for signed exact-commit evidence on public Agent Skills

a11oy — governed-AI Command Center. Deny by default. Signed receipts. Trust ceiling 0.97. Λ = Conjecture 1.

Lockfile, provenance and capability policy for AI agent skills. Pin what your agent can do — and prove it. Zero runtime dependencies.

Dual-Server-Side-Encryption on AWS S3 objects/buckets

Build Sigstore bundles (.sigstore.json) in PHP — the counterpart to verification, emitting DSSE and message-signature bundles.

Detects real change in FedRAMP's machine-readable rules, schemas, and marketplace data, and emits a cryptographically signed .aion chain

Portable evidence attestations: in-toto / DSSE / SARIF from courts and casefiles

Universal SLSA evidence engine and verifier — and the release engine that produces the evidence: versions, changelogs, SBOMs, VEX, attestations, and the walk a stranger runs to check them

ARCHIVED duplicate/hologram. Canonical: https://github.com/szl-holdings/lutar-lean

Open standard and static exchange for portable agents, workflows, loops, and agent teams