Sigstore Python Packages

sigstore-models

Pydantic-based, protobuf-free data models for Sigstore

ai-rulez

Standards-compliant lifecycle tool for agent knowledge and capabilities: author, generate, bundle, validate, govern, publish.

model-signing

Supply chain security for ML

arkforge-mcp

Third-party cryptographic proof for AI agent API calls — ArkForge Trust Layer MCP server

attestplane

Verifiable audit substrate for AI agents — EU AI Act Article 12 ready. Apache 2.0.

agtmls

Signed, audited registry of agent skills (SKILL.md) for Claude Code, OpenAI Codex, Aider and Antigravity: verified installs, a prompt-injection and supply-chain audit with SARIF, a signed index, signed in-toto attestations, and with/without evals that measure whether a skill helps. Stdlib-only Python CLI, agtmls-spec L5.

proofbundle

Portable evidence for AI work, verifiable offline. Integrity, not truth

craevidence

CLI for EU Cyber Resilience Act compliance evidence: SBOM validation, vulnerability checks, and signing

keel-verifier

Independent verifier for signed AI audit exports and Permit-spec evidence

novafabric

Open-source replay and evidence infrastructure for AI agents. Capture runs as portable Run Capsules for replay, diff, lineage, provenance, and audit.

frontier-scout

Check agent PRs against base-branch scope policy. Compile Claude Code controls and report unauthenticated approvals as UNVERIFIED.

pwned-deps

Is your lockfile pwned? 5-second scan of npm/PyPI/Maven/Cargo/Go/RubyGems lockfiles for compromised packages — OSV + curated campaign feed, --min-age cooling-off gate, exit 4 when a scan is incomplete. SLSA L3, Sigstore-signed feed.

trustcheck

Verify PyPI package attestations and improve Python supply-chain security

watermarking-authenticity-mcp

💧 Exposes EU AI Act Article 50 watermarking and C2PA 2.1 checks over MCP — built for the 2 December 2026 transparency deadline. MIT.

h4-hello

A practice project for publishing Python projects created with uv to PyPI with PEP740 signatures.

ladex

A bill of lading for AI: shift-left AI governance and ML-BOM generation for developers.

veritensor

The Anti-Virus for AI Artifacts & RAG Firewall. A static analysis tool scanning Models and Notebooks for RCE, Datasets and RAG docs for Data Poisoning, PII, and Prompt Injections. Secure your AI Supply Chain.

qknot

Hybrid post-quantum signing & identity registration; audits of HF/npm/PyPI found 0 PQ signatures.

mcpkernel

The Security Kernel for AI Agents — MCP/A2A gateway with policy enforcement, taint tracking, sandboxed execution, deterministic envelopes, and Sigstore audit. OWASP ASI 2026 compliant.

agent-evidence-admission

OPA, Kyverno and Sigstore policy-controller rules that admit signed AI-agent execution evidence against a consumer-pinned policy.

securescan

Security scanning without the SaaS tax. Multi-scanner orchestration, baseline diffing, SBOM + SARIF, signed everything — runs in your terminal, your CI, or a dashboard you own.

atrib

Verifiable agent actions. Every action becomes signed context for the next. Ed25519 signatures, Merkle log proofs, independently verifiable by anyone.

cuttledb

Embedded realtime database with vector search (HNSW), BM25, RRF hybrid retrieval, Boolean DSL, real-time SUB/UNSUB push, and ACID transactions with WAL. One self-contained binary under 1 MB. Apache-2.0.

provedex-langchain

Cryptographic evidence layer for AI agents. Ed25519-signed, SHA-256-chained audit logs anyone can verify offline.