Skip to content

v0.1.0

Latest
Latest

Choose a tag to compare

View all tags
@mrodgersjs-web mrodgersjs-web released this 11 Oct 01:42
v0.1.0
bfe3b50
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

v0.1.0 - proof-studio: the RIGForge ProofPacket CLI. Seal an agent's "done" claim in an HMAC-signed packet and verify it later.

  • packages/rigforge: rigforge demo, init, run, seal, verify --require-signature, benchmark and an MCP server.
  • rigforge demo shows a forged packet with a recomputed hash passing the plain integrity check and failing the signature check.
  • The benchmark runs seeded offline scenarios of tampered artifacts, forged signatures, swapped artifacts, unsigned tampering and dropped gates.
  • Verified at this commit: the repository's smoke and ci workflows pass on main.
  • Known replay gaps (not yet caught): the signed packet has no project id or nonce, so (1) a packet copied from another project that uses the same signing key, and (2) an older valid packet from an earlier run of the same phase, will still verify. Use a separate signing key per project and keep proofs under version control. A valid packet placed in a different phase slot IS rejected.
  • MIT licensed. No secrets, internal addresses or client names found by the pre-release scan.
Assets 2
Loading