simple-ai-provenance
Track every AI prompt you send in Claude Code, annotate git commits with what was asked, and query the full history of any session.
What it does
- Auto-captures every prompt you send in Claude Code via a hook — no manual steps
- Annotates commits with the prompts that produced the code, via global git hooks
- Answers "what did I do in this session?" through MCP tools callable inside Claude
- Generates PR descriptions with the full AI audit trail across every commit on the branch
- Tracks cross-repo work — if Claude is opened in one repo but edits files in another, prompts follow the files
- Stays compact — commit messages switch from verbose (all prompts) to condensed (summary) above a configurable threshold
Install
pip install simple-ai-provenance
provenance-setup
Then restart Claude Code and Claude Desktop.
That's it. Every prompt from that point forward is recorded automatically.
How it works
You type a prompt
↓
UserPromptSubmit hook fires → written to ~/.claude/provenance/provenance.db
↓
Claude writes/edits files
↓
PostToolUse hook fires → cross-repo reference stored if files are in a different repo
↓
git commit -m "fix: ..."
↓
prepare-commit-msg hook appends AI provenance block
↓
post-commit hook marks those prompts as committed
Commit message (≤ 5 prompts — verbose)
fix: auth bug
── AI Provenance ──────────────────────────────────────────
Session 1 (2026-02-26 14:30, id: a1b2c3d4, 3 prompts)
• fix the auth bug in login.py
• add error handling for the edge cases
• write unit tests for the new endpoints
Files: src/auth/login.py, tests/test_auth.py
─────────────────────────────────────────────────────────
Commit message (> 5 prompts — long form)
Above the threshold the block stays complete — every prompt is still listed,
just tighter, and capped by max_prompt_lines.
refactor: connection pooling
── AI Provenance ──────────────────────────────────────────
12 prompts · 2 sessions over 1h 23m
Session 1 (09:00, id: a1b2c3d4, 5 prompts)
• refactor the database connection pooling module
• pool should be lazy, not built at import time
• ... (each prompt on its own line)
Session 2 (10:30, id: e5f6g7h8, 7 prompts)
• add retry logic with exponential backoff
• ...
(+2 more prompts — call get_session_summary in Claude)
Files: src/db/pool.py, src/db/retry.py (+3 more)
─────────────────────────────────────────────────────────
The block is plain text and is stored in the commit message. Earlier versions
prefixed every line with #, which made the block's survival depend on how the
commit was made: git commit -m keeps comment lines (cleanup mode
whitespace), while any editor-based commit deletes them (cleanup mode
strip). An audit trail that disappears depending on how you commit is not an
audit trail, so as of 3.2.0 the block is written as ordinary message text.
Commits made in a batch
One piece of work is often split into several commits made seconds apart.
Provenance is not consumed by the first of them: a commit also picks up the
prompts attached to commits made in the same repo within batch_window_minutes
(default 10), so every commit in the burst carries the same block.
MCP Tools
Once installed, these tools are available inside any Claude session:
| Tool | What it does |
|---|---|
get_session_summary |
Prompts + files touched + tools used for a session |
get_uncommitted_work |
All prompts since last commit, grouped by session |
generate_commit_context |
Formatted provenance block for a commit message |
generate_pr_description |
Full AI audit trail across all commits on the current branch |
mark_committed |
Mark pending prompts as committed (auto-called by git hook) |
list_sessions |
Recent sessions with prompt counts |
configure |
Get or set config (e.g. verbose_threshold) |
Configuration
Config lives at ~/.claude/simple-ai-provenance-config.json:
{
"settings": {
"verbose_threshold": 5,
"batch_window_minutes": 10,
"max_prompt_lines": 40
}
}
| Setting | Default | What it does |
|---|---|---|
verbose_threshold |
5 | At or below this many prompts, the block uses the roomier verbose layout |
batch_window_minutes |
10 | Commits made within this window share provenance instead of the first one consuming it |
max_prompt_lines |
40 | Most prompt lines printed in one block; the rest are summarised as +N more |
Prompts that are not user input — harness task notifications, subagent messages, local command output, system reminders — are filtered out at record time and again when a block is built, so entries recorded by earlier versions never reach a commit message.
Change it via the MCP tool inside Claude:
configure verbose_threshold=10
Or directly edit the JSON file.
Requirements
- Python 3.9+
- Claude Code (Claude CLI)
- Claude Desktop (optional — for MCP tools in the desktop app)
- Git
PR integration
sap-pr wraps gh pr create with the AI provenance block pre-filled in the body:
cd your-repo
sap-pr # gh prompts you interactively for title etc.
sap-pr --title "feat: auth" # skip the interactive title prompt
sap-pr --base develop # diff against a branch other than main
sap-pr --dry-run # preview the body without creating the PR
The generated PR body lists every AI prompt grouped by session, across all commits on the branch.
How sessions are scoped
Each Claude Code session is scoped to the git repository detected from the working directory. Prompts from different projects never mix.
Session in ~/projects/api → recorded under repo /Users/you/projects/api
Session in ~/projects/web → recorded under repo /Users/you/projects/web
Cross-repo tracking: if Claude is opened in workspace/ but edits files in workspace/my-service/, the PostToolUse hook detects the file's actual git root and stores a cross-reference. Running sap-pr inside my-service/ will include those prompts.
Troubleshooting
Windows
pip or provenance-setup not found
If pip install simple-ai-provenance fails or provenance-setup is not recognized:
# Use the Python launcher (ships with Python for Windows)
py -m pip install simple-ai-provenance
py -m simple_provenance_tracker.install
Ensure Python is in your PATH. The Windows Python installer has an "Add to PATH" checkbox — if you missed it, re-run the installer and enable it.
Cannot modify Claude settings
If provenance-setup reports it could not write settings.json:
- Close Claude Code completely
- Re-run
provenance-setup(orpy -m simple_provenance_tracker.install)
Claude Code may lock ~/.claude/settings.json while running.
MCP server not listed in Claude Code
Use the absolute Python path in your MCP config. Find it with:
py -c "import sys; print(sys.executable)"
Then in ~/.claude.json (or %USERPROFILE%\.claude.json):
{
"mcpServers": {
"simple-ai-provenance": {
"command": "C:/Users/YOU/AppData/Local/Programs/Python/Python311/python.exe",
"args": ["-m", "simple_provenance_tracker.mcp_server"]
}
}
}
Git hooks not firing
Ensure Git for Windows is installed. Verify the hooks path:
git config --global core.hooksPath
# Should show: C:\Users\YOU\.config\git\hooks
macOS
simple-ai-provenance: command not found
The CLI may be installed into a Python bin/ directory that isn't in your shell's PATH. Find and add it:
# Find where it was installed
python3 -c "import sys; print(sys.executable)"
# e.g. /Library/Frameworks/Python.framework/Versions/3.11/bin/python3
# Add the bin directory to your shell profile
echo 'export PATH="/Library/Frameworks/Python.framework/Versions/3.11/bin:$PATH"' >> ~/.zshrc
source ~/.zshrc
If your active shell is bash (not zsh), also add to ~/.bash_profile and ~/.bashrc.
MCP server not listed in Claude Code
Register globally with the absolute Python path in ~/.claude.json:
{
"mcpServers": {
"simple-ai-provenance": {
"command": "/Library/Frameworks/Python.framework/Versions/3.11/bin/python3",
"args": ["-m", "simple_provenance_tracker.mcp_server"]
}
}
}
Validate JSON: python3 -m json.tool ~/.claude.json >/dev/null && echo OK
Then restart Claude Code.
General
If MCP tools still don't appear after setup, the two most common checks are:
- Can the CLI be found? (
which simple-ai-provenanceon macOS,where simple-ai-provenanceon Windows) - Is the Claude config valid JSON? (
python3 -m json.tool ~/.claude.json)
Uninstall
# Remove git hooks
git config --global --unset core.hooksPath
# Remove the UserPromptSubmit block from ~/.claude/settings.json
# Remove the simple-ai-provenance entry from Claude Desktop config
# Remove data (optional)
rm -rf ~/.claude/provenance/
rm ~/.claude/simple-ai-provenance-config.json
pip uninstall simple-ai-provenance
License
AGPL-3.0-or-later
Metadata
Release files for simple-ai-provenance 3.2.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| simple_ai_provenance-3.2.0.tar.gz | 22.2 kB | With provenance | Details for simple_ai_provenance-3.2.0.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| simple_ai_provenance-3.2.0-py3-none-any.whl | Python 3 | none | any | Details for simple_ai_provenance-3.2.0-py3-none-any.whl |
Total release size: 50.4 kB
Release files / simple_ai_provenance-3.2.0.tar.gz
| Download URL | simple_ai_provenance-3.2.0.tar.gz |
|---|---|
| Size | 22.2 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
9d40cfc8072da5923a27b0b3953f9d4746fff27cd6499c82eeb060fc105dd049
|
|
BLAKE2b-256 checksum How to use checksums |
2cfaa45a043266f1c43450a0cc6ba7e8750e533d099293ce19134c391ab8f0c6
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 6, 2026.
Transparency logRelease files / simple_ai_provenance-3.2.0-py3-none-any.whl
| Download URL | simple_ai_provenance-3.2.0-py3-none-any.whl |
|---|---|
| Size | 28.2 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
e5e8cc5539bba8ae7ac9c9ad9cb7b2558f3f44b970870117351c39d56c550dd4
|
|
BLAKE2b-256 checksum How to use checksums |
7009312def3df260bcce4c3d7711c24c5a3aa91e2babea77a30b3c972a27d192
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 6, 2026.
Transparency logSecurity for simple-ai-provenance 3.2.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
Both files in this release have been uploaded with provenance metadata.
Attestation for simple_ai_provenance-3.2.0.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 6, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.