#provenance

A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.

Open evidence profile for MCP tool actions. Enforce configured tool-call policies and record decisions and observations in offline-verifiable bundles. Optional Linux kernel controls. No hosted backend required.

TRACE: Trust Runtime Attestation and Compliance Evidence. Open attestation standard for agentic AI governance.

Terminal based IDE & text editor: easy, powerful and fast

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

TRACE compliance test suite. Conformance tests for TRACE Certification.

Convert all CAD formats

The Node framework that owns its stack.

AST-based Python obfuscator with reverse stack-trace mapping — obfuscate before shipping and keep production tracebacks AI-debuggable. MCP + VS Code.

Curated agent skills by humans. Search, run, install, and keep them current from one CLI.

Remove visible and invisible AI watermarks and provenance metadata from images and video. Python library and CLI for SynthID, C2PA, EXIF, IPTC, XMP, and common generative-AI marks.

The shared transparency foundation under Kontour's products — one shape for claims, evidence, freshness, and gaps.

Unified CLI for software supply-chain governance / verify GitHub artifact attestations, evaluate OPA/Rego policies, generate SLSA Verification Summary Attestations (VSAs), and manage releases.

Verifiable agent actions. Every action becomes signed context for the next. Ed25519 signatures, Merkle log proofs, independently verifiable by anyone.

the governed runtime for agent skill workflows, off the leash but on the record

Open source compliance-first AI operating system for SEC-registered investment advisers. Apache 2.0 licensed with defensive patent grant.

Grade every agent, scraper and model in a claim's chain — provenance, trust scoring and audit evidence for LLM pipelines

Offline cryptographic receipts for AI evaluation results — Ed25519 + RFC 6962 Merkle + optional SD-JWT. Integrity, not truth

W3C PROV provenance documents in TypeScript - typed authoring plus PROV-JSON/PROV-N round-tripping

Truestamp CLI

Portable trust receipts for agent workflows. Signed, chained, verifiable.