13 projects
firedrill
A backup you have not restored is not a backup. firedrill restores it and proves it is usable.
drift-evidence
Does a device's real network traffic match what it's declared to be allowed to contact? Checked against a real packet capture.
receipt-evidence
Verified receipts for what commands, AI agent tool calls, and browser clicks actually did -- plus a tamper-evident bundle format to keep them in.
satchel-reader
A local-first reading queue: saves the real article text, not just the link, and makes it genuinely offline-searchable.
sourced-evidence
Per-claim grounded/contradicted/unverified checking of LLM output against its own source context -- never a blended trust score.
lockstep-evidence
Does what's actually installed match the lockfile? Runtime dependency drift, not just a commit-time CVE scan.
carabiner-sec
Make any repo secure by default, keep it that way, and prove the controls fire.
escrow-evidence
A dead-man's-switch for cron/scheduled jobs: flags silence, not just failure -- the job that stopped running weeks ago that no alert ever caught.
invariant-verify
Declare what must stay true. invariant runs the checks and writes a proof bundle, not just a pass/fail line.
portable-evidence
Deprecated: now invariant's export_contains check. The portable command still works and delegates to it.
providence-evidence
Deprecated: now part of receipt-evidence. Installs it and keeps old imports working.
clicked-evidence
Deprecated: now part of receipt-evidence. Installs it and keeps old imports working.
custody-evidence
Deprecated: now part of receipt-evidence. Installs it and keeps old imports working.
