Go
Sigstore/rekor
Software Supply Chain Transparency Log
Apache-2.0Jul 18, 2026 · metrics 2.10.0
All tags
Catalogue tag
#provenance
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
52 records
Go
kubernetes-sigs/tejolote
A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.
Apache-2.0Jul 24, 2026 · metrics 2.10.0
PyPI · npm
sipyourdrink-ltd/bernstein
Deterministic orchestrator for CLI coding agents (Claude Code, Codex, Gemini CLI, +40 more). No model in the coordination loop, so parallel runs in per-task git worktrees replay byte-identically. Signed lineage plus an opt-in HMAC audit chain a reviewer checks offline, without rerunning it. Cluster mode, air-gap deploy. https://bernstein.run
Apache-2.0Jul 28, 2026 · metrics 2.10.0
crates.io · npm
sinelaw/fresh
Terminal based IDE & text editor: easy, powerful and fast
GPL-2.0Aug 28, 2026 · metrics 2.10.0
PyPI
aboutcode-org/scancode-toolkit
:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!
Custom licenseJul 21, 2026 · metrics 2.10.0
npm
blamejs/blamejs
The Node framework that owns its stack.
Apache-2.0Aug 22, 2026 · metrics 2.10.0
crates.io
Blackcat-Informatics/purrdf
PurRDF — one RDF 1.2 engine, one behavior, every language: interned primitives, Turtle/TriG/N-Quads/RDF-XML/JSON-LD codecs, RDFC-1.0, SPARQL 1.1/1.2, SHACL Core, GTS graph transport, and Python/WebAssembly/C bindings.
Apache-2.0Jul 26, 2026 · metrics 2.10.0
Go
liatrio/autogov
Unified CLI for software supply-chain governance / verify GitHub artifact attestations, evaluate OPA/Rego policies, generate SLSA Verification Summary Attestations (VSAs), and manage releases.
Apache-2.0Aug 1, 2026 · metrics 2.10.0
PyPI
wiltodelta/remove-ai-watermarks
AI watermark remover. CLI and Python library to strip visible and invisible AI watermarks (Gemini / Nano Banana sparkle, SynthID) and provenance metadata (C2PA, EXIF, IPTC) from images.
Apache-2.0Aug 3, 2026 · metrics 2.10.0
npm
Protocol-Wealth/pwos-core
Open source compliance-first AI operating system for SEC-registered investment advisers. Apache 2.0 licensed with defensive patent grant.
Apache-2.0Jul 25, 2026 · metrics 2.10.0
Go
truestamp/truestamp-cli
Truestamp CLI
MITAug 19, 2026 · metrics 2.10.0
npm
aikdna/kdna-studio-core
KDNA Studio authoring core for structuring, reviewing, and exporting versioned judgment assets.
Apache-2.0Jul 23, 2026 · metrics 2.10.0
PyPI
alizahidraja/isnad
Grade every agent, scraper and model in a claim's chain — provenance, trust scoring and audit evidence for LLM pipelines
Apache-2.0Aug 29, 2026 · metrics 2.10.0
PyPI · npm
creatornader/atrib
Verifiable agent actions. Every action becomes signed context for the next. Ed25519 signatures, Merkle log proofs, independently verifiable by anyone.
Apache-2.0Jul 15, 2026 · metrics 2.10.0
npm
pppp606/ink-chart
Terminal visualization components for Ink CLI framework - Sparkline and BarChart components with TypeScript support
MITJul 25, 2026 · metrics 2.10.0
crates.io · npm
runxhq/runx
the governed runtime for agent skill workflows, off the leash but on the record
MITJul 15, 2026 · metrics 2.10.0
PyPI
b7n0de/proofbundle
Offline cryptographic receipts for AI evaluation results — Ed25519 + RFC 6962 Merkle + optional SD-JWT. Integrity, not truth
MITJul 23, 2026 · metrics 2.10.0
npm
basou-dev/basou
Provenance layer for AI agent sessions — record, replay, and reason about Claude Code (and other agent) work.
Apache-2.0Aug 22, 2026 · metrics 2.10.0
PyPI
russalo/file-observer
Deterministic file observation for pipelines — one read-only pass over a directory emits a reproducible JSON manifest of every file's type, metadata, structure, and provenance.
Custom licenseJul 17, 2026 · metrics 2.10.0
Go
yazanabuashour/openclerk
The governance layer for LLM-maintained Markdown wikis.
MITJul 31, 2026 · metrics 2.10.0
npm
aikdna/kdna-studio-cli
KDNA Studio CLI for creating, reviewing, and exporting packaged .kdna judgment assets.
Apache-2.0Jul 17, 2026 · metrics 2.10.0
npm
dot-skill/skillerr
Open .skill Protocol - a sealed, inspectable package format for AI agent skills. Reference implementation: skillerr.
Apache-2.0Jul 27, 2026 · metrics 2.10.0
PyPI
adammatthewsteinberger/vibey-gh
Event-driven GitHub automation for reviews, repairs, releases, provenance, and beautiful dual-channel documentation.
MITAug 28, 2026 · metrics 2.10.0
Go
23min/aiwf
aiwf is a Git-native kernel for human+AI projects: plans, decisions, and provenance, gated and validated at every commit.
Apache-2.0Jul 26, 2026 · metrics 2.10.0
PyPI · npm
Daily-Nerd/daimon
Dream-briefing for AI coding agents: a cognitive checkpoint at session end, a 'while you were away' briefing at session start.
Apache-2.0Jul 30, 2026 · metrics 2.10.0
PyPI
ryannduma/crystalyse.ai
Intelligent Scientific Agent for Materials Design
MITJul 17, 2026 · metrics 2.10.0
PyPI
veracium-ai/Veracium
Provenance-aware memory for AI agents.
MITAug 2, 2026 · metrics 2.10.0
npm
HosungYou/LongTable
Research control plane for AI-assisted scholarship: durable human checkpoints, lawful evidence provenance, and verifiable research packages.
MITAug 27, 2026 · metrics 2.10.0
npm
mondaycom/agent-tool-protocol
Agent Tool Protocol
MITJul 29, 2026 · metrics 2.10.0
PyPI
ywatanabe1989/scitex-clew
Verifiable knowledge graph for scientific experiments
AGPL-3.0Jul 16, 2026 · metrics 2.10.0