Status: active
Control center for Project Verity — a decentralized, censorship-resistant application marketplace for the agentic era, where software is distributed as on-chain licenses and executed inside attested confidential VMs.
The defining property:
licensed_composeHash == attested_composeHash
What you own and what is actually executing are cryptographically the same thing.
The licensed object is an exact configuration — an app-compose.json in which every image is
pinned by digest — because that configuration is what the platform measures, and because the right
image running in a wrong environment is not the thing you licensed.
Read docs/Verity-spec.md for the full specification.
This repo holds no product code. It coordinates the work that happens in the sibling repos.
| Directory | Contents |
|---|---|
docs/ |
The spec, the architecture, and the decision record. |
deployments/ |
NixOS flake, modules, and per-host configuration. Executable descriptions of what runs where. |
services/ |
Small Rust services (MCP + HTTP/JSON) that help agents navigate this project. |
observability/ |
The telemetry contract every sibling repo conforms to. |
records/ |
Historical record: plans, RFCs, change history, incidents, experiments. |
- New to the project →
docs/Verity-spec.md, thendocs/architecture/. - Looking for the sibling repos → the table in
CLAUDE.md§0. - Wondering why something is the way it is →
docs/decisions/, then spec §2. - An agent working in this repo →
CLAUDE.mdis your operating manual.