scitt

Supply Chain Integrity Transparency and Trust ledger application using Confidential Consortium Framework (CCF)

Compliance trust shouldn't require emailing PDFs and hoping nobody tampered with them. Corsair signs compliance findings as verifiable digital certificates that anyone can check with a standard JWT library.

SCITT Website content

Transparency Service REST API

Verifiable Credential Endorsements PoC inspired by SCITT.

Agent Name Service (ANS) Swift SDK with registry, badge verification, SCITT, DANE, WASM, and Embedded Swift support.

A COSE SDK for TypeScript

View CBOR Extended Diagnostic Notation (EDN) for `.cbor` files in VSCode.

Self-hosted governance layer between AI assistants and your real data. Deterministic PII masking, allow/deny policy, hash-chained audit, offline-verifiable Ed25519 receipts per access when a receipt sink is configured, coverage reconciliation against the DB's own query counters to surface gateway bypasses, and conformance vectors. MCP-native. MIT.

GitHub Action for a DataTrails Implementation of SCITT

A self-improving, verifiable memory layer for AI coding agents.

Moved to iTechSmartINC/prooflink-verifier

An open standard for verifiable execution provenance: a portable, third-party-verifiable record of what an agent did, in what order, and under what governance.

Supply Chain Transparency Service

Worked examples of the observed_effect v0 evidence contract: a bounded, recomputable observed-effect record and an independent consumer.

One Receipt — one signed, content-free receipt per AI transaction that a stranger can verify offline, a person can challenge, and a regulator can inspect. Spec v0.2-draft, reference implementation, test vectors, coalition plan. AiGovOps Foundation incubation.

Moved to iTechSmartINC/prooflink-sdk

An audit layer for agent-to-agent commerce: signed trade manifests, default-deny spend policy, COSE_Sign1 receipts, epoch checkpoints, and rail-extract reconciliation. Specified in IETF Internet-Drafts. Maintained by VERAX Teknoloji (verax-ai.com).

Archived — see verifiedstate.ai for the current product.

Proof-of-concept demonstrating cryptographically verifiable AI generation refusals. This repository shows how unsafe or illegal generations can be proven to have never occurred, using hash chains, signatures, and auditable evidence packs.