Public Pilot — CODED:X is currently in active development.

03 // PROVENANCE & VERIFICATION Live Cryptographic trust

Code Authenticity.

Link real humans to their commits. Identity verification (academic + ID), code identity linkage (GitHub, GitLab), and immutable attestations.

Identity linkage Project linkage Ledger-grade attestations Revocation aware

Identity linkage

Who is this human?

Stripe ID checks and academic verification bound to GitHub/GitLab IDs. One identity across platforms.

  • Immutable platform user IDs
  • Verification sessions + expiry
  • Revocable links with audit log

Project linkage

What code belongs here?

Multi-repo mapping with OAuth-backed ownership to prove project boundaries across GitHub, GitLab, and Bitbucket.

  • Verified repository binding
  • Auto-ingested commit metadata
  • Supports monorepo + polyrepo

Attestation

Sealed commits

Every verified commit produces an attestation: hash, ledger location, timestamp, and signer identity.

  • SHA-1 / SHA-256 support
  • Ledger storage with integrity checks
  • Replay-safe verification

Trust controls

Audit + revocation

Revocation-aware attestations with expiry, renewal, and audit trails for compliance-grade evidence.

  • Time-bound verifications
  • Reasoned revocations
  • Exportable evidence bundles

Risk

Anomaly signals

Contribution risk scoring with repository drift detection and signer anomalies.

Ledger

Immutable storage

Tamper-evident storage locations with checksums and redundancy.

Interoperability

API-first

Export attestations, stream verification events, and integrate into CI/CD pipelines.

Verify your code contributions.

Cryptographic proof of who built what — immutable, auditable, trustworthy.