signetry¶
A change-control plane for coding agents.
Coding agents (Claude Code, Codex, Cursor, Copilot, Devin) can change your repository. signetry-core is the layer that decides how much authority a given change has earned — and proves it — for any agent. It sits above the agent, at the repository, where governance is enforceable.
For every change it runs one deterministic pipeline:
executable contract → untrusted-text quarantine → required checks →
independent verifier → earned authority (0/1/2) → Ed25519-signed receipt
The governing insight: a coding agent cannot approve its own authority to make a
change. The patch-writer is never the patch-approver. auto_merge is always
false — a human merges.
Where to start¶
- Quickstart — install and govern a change in minutes.
- Concepts — the pipeline, earned authority, receipts.
- GitHub Action — govern every PR (on the Marketplace).
- Security — threat model and honest scope.
Install¶
# source-available (All Rights Reserved); not on PyPI — install from source
pip install "signetry-core @ git+https://github.com/Signetry/core@v0.6.0"
- Source (install from here): https://github.com/Signetry/core
- Action (Marketplace): https://github.com/marketplace/actions/umbra-admission
License & contributing¶
signetry-core is source-available — the code is public to read, evaluate, and contribute to, but it is not open source. It is All Rights Reserved (© 2026 Binay Dalai) and installed from source (not PyPI).
Contributions are welcome under a Contributor License Agreement: you can
contribute and you'll be credited (in CONTRIBUTORS.md, the Git history, and
release notes), but you gain no right to use, sell, or rebrand the project — the
owner retains all rights. See
CONTRIBUTING.md,
the CLA, and the
good-first-issues board.