npm
KnightsbridgeAIQ/kxco-pq-attest
ML-DSA-65 signed deploy attestations for the KXCO stack (NIST FIPS 204).
Apache-2.0Sep 18, 2026 · metrics 2.10.0
All tags
Catalogue tag
#attestation
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
56 records
Maven
a-sit-plus/signum
Kotlin Multiplatform Crypto/PKI/ASN.1 Library with Attestation and Hardware-Backed Crypto Support on Mobile
Apache-2.0Oct 21, 2026 · metrics 2.10.0
PyPI · npm
DanceNitra/inspeximus
The self-correcting memory layer for AI agents. Zero-dependency Python memory and MCP server. Supersede, revert, or forget a value deterministically. Verifiable erasure, witness-backed tamper-evident receipts, EU AI Act ready.
MITOct 21, 2026 · metrics 2.10.0
Go
deploymenttheory/go-sdk-vtpm2
A pure Go software TPM 2.0 (vTPM) implementation. Including features such as measured boot, BitLocker sealing & attestation for Windows 11 guests under QEMU, built from the TCG spec.
MITSep 19, 2026 · metrics 2.10.0
npm · crates.io
quality-sh/provenance
No repository description published.
Custom licenseOct 20, 2026 · metrics 2.10.0
PyPI · crates.io · npm
drexthealpha/Knos
The neutral meter for AI agent work: neither side keeps the count.
MITOct 8, 2026 · metrics 2.10.0
Packagist
k2gl/dsse
Sign and verify DSSE (Dead Simple Signing Envelope) payloads in PHP.
MITSep 13, 2026 · metrics 2.10.0
crates.io
kinvolk/azure-cvm-tooling
Libraries and tools for Confidential Computing on Azure
MITSep 13, 2026 · metrics 2.10.0
PyPI
QWED-AI/qwed-ucp
Verification for Universal Commerce Protocol (UCP) transactions — Deterministic verification layer for UCP checkouts: catches math, state, and schema errors before payment.
Apache-2.0Sep 14, 2026 · metrics 2.10.0
crates.io
auths-dev/auths
Local first, air-gapped identity for individuals, AI agents, organizations, with permissioning. Docs below are for contributors.
Custom licenseSep 14, 2026 · metrics 2.10.0
npm · PyPI
orangecheck/oc-packages
Monorepo for the @orangecheck/* npm packages + the orangecheck Python SDK. SDK, gate middleware, React bindings, wallet adapter, CLI, Strfry relay filter, airdrop-gate.
MITSep 14, 2026 · metrics 2.10.0
crates.io
aws/NitroTPM-Tools
No repository description published.
Custom licenseOct 6, 2026 · metrics 2.10.0
npm
dot-skill/skillerr
Open .skill Protocol - a sealed, inspectable package format for AI agent skills. Reference implementation: skillerr.
Apache-2.0Sep 14, 2026 · metrics 2.10.0
npm
thelabmd/UST-Protocol
RSS for state. Open portable evidence layer for machine state - preserving what an agent or system saw, produced, derived and learned, so another party or future agent can verify the lineage independently.
Apache-2.0Sep 8, 2026 · metrics 2.10.0
npm · Go
Daily-Nerd/vitni
The verifiable trail of agent actions — signed, tamper-evident execution receipts for AI agents (MCP & A2A).
Apache-2.0Sep 10, 2026 · metrics 2.10.0
Go · PyPI
probityai/agent-evidence-vectors
Conformance vector suite and reference verifier for the adversarial-execution-evidence in-toto predicate
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm · Go · crates.io
anna-stolbovskaja/CasperProver
Verifiable proof layer for AI agent computations on Casper Network
Custom licenseSep 19, 2026 · metrics 2.10.0
npm · PyPI · RubyGems +3
Blue-Scroll/hap
When sending costs fractions of a cent, recipients drown. HAP (Human Attestation Protocol) is an open standard that lets senders prove they made real, non-fakeable effort to reach you so recipients can prioritize signal over noise.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI · npm
nohosa001-pixel/security-gate-x402
The Zero-Trust Safety & Settlement Rail for Autonomous AI Agents. Sub-10ms deterministic guardrails, key leak defense, and cryptographic Proof-of-Safety attestations via x402 on Base ($0.002).
MITOct 9, 2026 · metrics 2.10.0
Go · PyPI
kordloom/loomseal
An open format for evidence someone else can check. One signed, chained, anchored file, verified offline by a free Apache-2.0 tool with no account and no server.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
Verdifax/verdifax-verify
Cryptographic attestation infrastructure for high-stakes AI decisions. Every governed execution produces a sealed, independently-verifiable manifest hash. USPTO patent + trademark filed.
MITSep 12, 2026 · metrics 2.10.0
Go
telesma-app/mds
Go client for downloading, verifying, caching, and querying FIDO Metadata Service (MDS3) data
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm · PyPI · Go
cinchor-hq/cinchor-sdk
Cinchor client SDK — bound an AI agent before it acts, prove what it did after.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
—
CSOAI-ORG/gspc-board
GSPC Board — 22-axis AI measurement, Ed25519-signed cards, Merkle root, Bitcoin OTS anchoring. The public evidence layer for AI governance.
Custom licenseOct 7, 2026 · metrics 2.10.0
NuGet
ShiftSoftware/UnifiedAttestation
A robust, unified security layer for Azure Functions (Isolated Worker Model) designed to verify the integrity of mobile client requests across iOS, Android, and Huawei devices. It ensures incoming requests originate from legitimate, untampered versions of your mobile applications running on genuine devices.
Apache-2.0Sep 11, 2026 · metrics 2.10.0
Go
REGHELPNET/reghelp-client-go
Official Go SDK for REGHelp Key API — push tokens (APNS, FCM), Cloudflare Turnstile, reCAPTCHA Mobile, Google Play Integrity, iCloud Hide My Email, Gmail OAuth, VoIP push. Stdlib only, context-first, typed errors.
MITSep 15, 2026 · metrics 2.10.0