Go
sigstore/rekor
Software Supply Chain Transparency Log
Apache-2.0Sep 10, 2026 · metrics 2.10.0
All tags
Catalogue tag
#provenance
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
97 records
Go
sigstore/rekor-tiles
Signature Transparency Log designed for ease of use, low cost, and minimal maintenance
Apache-2.0Sep 15, 2026 · metrics 2.10.0
PyPI
aiidateam/aiida-core
The official repository for the AiiDA code
Custom licenseSep 7, 2026 · metrics 2.10.0
PyPI · npm
sipyourdrink-ltd/bernstein
The open‑source AI Agents Governance & Orchestration framework: write the rules declaratively, Bernstein enforces them and produces the verifiable, replayable record. Free, Apache-2.0. https://bernstein.run
Apache-2.0Sep 14, 2026 · metrics 2.10.0
Go
kubernetes-sigs/tejolote
A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.
Apache-2.0Sep 13, 2026 · metrics 2.10.0
PyPI · crates.io
Rul1an/assay
Open evidence profile for MCP tool actions. Enforce configured tool-call policies and record decisions and observations in offline-verifiable bundles. Optional Linux kernel controls. No hosted backend required.
MITOct 13, 2026 · metrics 2.10.0
crates.io · npm
sinelaw/fresh
Terminal based IDE & text editor: easy, powerful and fast
GPL-2.0Aug 28, 2026 · metrics 2.10.0
PyPI
aboutcode-org/scancode-toolkit
:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!
Custom licenseSep 12, 2026 · metrics 2.10.0
PyPI
agentrust-io/trace-tests
TRACE compliance test suite. Conformance tests for TRACE Certification.
Apache-2.0Oct 3, 2026 · metrics 2.10.0
npm
blamejs/blamejs
The Node framework that owns its stack.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
PyPI · npm
zhurong2020/pyobfus
AST-based Python obfuscator with reverse stack-trace mapping — obfuscate before shipping and keep production tracebacks AI-debuggable. MCP + VS Code.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm · crates.io
skilld-dev/skilld
Curated agent skills by humans. Search, run, install, and keep them current from one CLI.
MITSep 19, 2026 · metrics 2.10.0
PyPI
wiltodelta/remove-ai-watermarks
Remove visible and invisible AI watermarks and provenance metadata from images and video. Python library and CLI for SynthID, C2PA, EXIF, IPTC, XMP, and common generative-AI marks.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI · npm
creatornader/atrib
Verifiable agent actions. Every action becomes signed context for the next. Ed25519 signatures, Merkle log proofs, independently verifiable by anyone.
Apache-2.0Sep 8, 2026 · metrics 2.10.0
Go
liatrio/autogov
Unified CLI for software supply-chain governance / verify GitHub artifact attestations, evaluate OPA/Rego policies, generate SLSA Verification Summary Attestations (VSAs), and manage releases.
Apache-2.0Sep 15, 2026 · metrics 2.10.0
npm · crates.io
runxhq/runx
the governed runtime for agent skill workflows, off the leash but on the record
Apache-2.0Sep 8, 2026 · metrics 2.10.0
npm
Protocol-Wealth/pwos-core
Open source compliance-first AI operating system for SEC-registered investment advisers. Apache 2.0 licensed with defensive patent grant.
Apache-2.0Sep 13, 2026 · metrics 2.10.0
PyPI · npm
alizahidraja/isnad
Grade every agent, scraper and model in a claim's chain — provenance, trust scoring and audit evidence for LLM pipelines
Apache-2.0Oct 21, 2026 · metrics 2.10.0
PyPI
b7n0de/proofbundle
Offline cryptographic receipts for AI evaluation results — Ed25519 + RFC 6962 Merkle + optional SD-JWT. Integrity, not truth
MITSep 13, 2026 · metrics 2.10.0
npm
inflexa-ai/tsprov
W3C PROV provenance documents in TypeScript - typed authoring plus PROV-JSON/PROV-N round-tripping
Apache-2.0Sep 30, 2026 · metrics 2.10.0
Go
truestamp/truestamp-cli
Truestamp CLI
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm · crates.io · Go
zerkerlabs/treeship
Portable trust receipts for agent workflows. Signed, chained, verifiable.
Apache-2.0Oct 1, 2026 · metrics 2.10.0
npm
aikdna/kdna-studio-core
KDNA Studio authoring core for structuring, reviewing, and exporting versioned judgment assets.
Apache-2.0Sep 13, 2026 · metrics 2.10.0
PyPI · crates.io
adobe/trustmark
TrustMark - Universal Watermarking for Arbitrary Resolution Images
Custom licenseOct 3, 2026 · metrics 2.10.0
npm
aikdna/kdna-studio-cli
KDNA Studio CLI for making implicit judgment explicit, reviewing it, and exporting versioned KDNA assets.
Apache-2.0Sep 9, 2026 · metrics 2.10.0
npm
basou-dev/basou
Provenance layer for AI agent sessions — record, replay, and reason about Claude Code (and other agent) work.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
PyPI
bhargavamin/contexer
Contexer keeps the important engineering decisions behind your software current and available to every coding agent.
Custom licenseSep 9, 2026 · metrics 2.10.0
Go
git-pkgs/sigstore
sigstore-go wrapper for verifying attestation bundles against the Sigstore TUF trust root
MITSep 19, 2026 · metrics 2.10.0
PyPI
russalo/file-observer
Deterministic file observation for pipelines — one read-only pass over a directory emits a reproducible JSON manifest of every file's type, metadata, structure, and provenance.
Custom licenseSep 10, 2026 · metrics 2.10.0
crates.io · Maven
worldcoin/mobile-bench-rs
Benchmarking tool for Rust functions on mobile devices using BrowserStack.
MITSep 10, 2026 · metrics 2.10.0