scitt

Supply Chain Integrity Transparency and Trust ledger application using Confidential Consortium Framework (CCF)

Compliance trust shouldn't require emailing PDFs and hoping nobody tampered with them. Corsair signs compliance findings as verifiable digital certificates that anyone can check with a standard JWT library.

SCITT Website content

Transparency Service REST API

Verifiable Credential Endorsements PoC inspired by SCITT.

A COSE SDK for TypeScript

Agent Name Service (ANS) Swift SDK with registry, badge verification, SCITT, DANE, WASM, and Embedded Swift support.

View CBOR Extended Diagnostic Notation (EDN) for `.cbor` files in VSCode.

Self-hosted governance layer between AI assistants and your real data. Deterministic PII masking, allow/deny policy, hash-chained audit, offline-verifiable Ed25519 receipts per access when a receipt sink is configured, coverage reconciliation against the DB's own query counters to surface gateway bypasses, and conformance vectors. MCP-native. MIT.

GitHub Action for a DataTrails Implementation of SCITT

A self-improving, verifiable memory layer for AI coding agents.

An open standard for verifiable execution provenance: a portable, third-party-verifiable record of what an agent did, in what order, and under what governance.

Supply Chain Transparency Service

Moved to iTechSmartINC/prooflink-verifier

Worked examples of the observed_effect v0 evidence contract: a bounded, recomputable observed-effect record and an independent consumer.

One Receipt — one signed, content-free receipt per AI transaction that a stranger can verify offline, a person can challenge, and a regulator can inspect. Spec v0.2-draft, reference implementation, test vectors, coalition plan. AiGovOps Foundation incubation.

Moved to iTechSmartINC/prooflink-sdk

Proof-of-concept demonstrating cryptographically verifiable AI generation refusals. This repository shows how unsafe or illegal generations can be proven to have never occurred, using hash chains, signatures, and auditable evidence packs.

Archived — see verifiedstate.ai for the current product.

Verifiable compliance evidence: hash-chained ledgers, signed tip, hybrid Ed25519+ML-DSA-65, KMS custody, evidence packs, C2SP checkpoints + tlog-witness (split-view evidence, ML-DSA-44 cosignatures, real Rekor checkpoints verified), SCITT RFC 9943; verifiers in Python, JS, Go, Rust, Java + differential oracle. AGPL-3.0 / commercial.