Audit

Audit before install.

Check trust, quality, permissions and advisories before an agent changes a workspace.

Packages Trust

Registry

Current audit surface

Packages

Witnesses

3cc66da329...a7f631cf

Root hash

Quarantine

Yanked

100

Quality avg

Excellent

Needs review

nipmod audit --online
nipmod ci --online

Checks

What needs to pass

Signed bundles

Every listed package has a bundle signature.

Source tags

Verified packages bind a version tag to a Gitlawb commit.

Transparency

The checkpoint is witnessed outside the registry.

Quiet permissions

No listed package declares network, secrets, exec or install scripts.

No active quarantine

High risk advisories and yanked releases block public readiness.

Packages

Package audit cards

gitlawb-review-tool-bundle

Bundle Gitlawb repo review, diff summary and release review guidance.

Ready

Trust: verified/100
Quality: 100/100
Permissions: quiet

nipmod inspect pkg:did:key:z6Mknhqe5iXdzxNheEHf74zyZ9DVNiefnsyq4EQ5qRV4gaH2/gitlawb-review-tool-bundle@0.1.0 --json
nipmod install --plan pkg:did:key:z6Mknhqe5iXdzxNheEHf74zyZ9DVNiefnsyq4EQ5qRV4gaH2/gitlawb-review-tool-bundle@0.1.0 --json

Package Evidence

package-safety-eval-pack

Evaluate package safety scanners against known unsafe agent package fixtures.

Ready

Trust: verified/100
Quality: 100/100
Permissions: quiet

nipmod inspect pkg:did:key:z6Mkp52AN6L6AymVvV9bVJfmt5UG3Lwrx7JUm2VPfcTG2bJF/package-safety-eval-pack@0.1.0 --json
nipmod install --plan pkg:did:key:z6Mkp52AN6L6AymVvV9bVJfmt5UG3Lwrx7JUm2VPfcTG2bJF/package-safety-eval-pack@0.1.0 --json

Package Evidence

launch-strict-policy-pack

Apply launch strict install policy for verified agent packages.

Ready

Trust: verified/100
Quality: 100/100
Permissions: quiet

nipmod inspect pkg:did:key:z6Mkr8jKUSoDpRJBu1Ap3s7ffBVhgJFwkjcQbwfAJz1R9UyE/launch-strict-policy-pack@0.1.0 --json
nipmod install --plan pkg:did:key:z6Mkr8jKUSoDpRJBu1Ap3s7ffBVhgJFwkjcQbwfAJz1R9UyE/launch-strict-policy-pack@0.1.0 --json

Package Evidence

readonly-registry-mcp-server

Expose read only Nipmod registry search and inspect tools through MCP.

Ready

Trust: verified/100
Quality: 100/100
Permissions: quiet

nipmod inspect pkg:did:key:z6MkpGtx4yWYfinzs3KsyLERUNhBePzcmdk8JvPRHvdfUL3j/readonly-registry-mcp-server@0.1.0 --json
nipmod install --plan pkg:did:key:z6MkpGtx4yWYfinzs3KsyLERUNhBePzcmdk8JvPRHvdfUL3j/readonly-registry-mcp-server@0.1.0 --json

Package Evidence

package-migration-planner

Plan a Gitlawb, MCP or APM source migration into a Nipmod package.

Ready

Trust: verified/100
Quality: 100/100
Permissions: quiet

nipmod inspect pkg:did:key:z6Mkp7vpuGY1bRKZNHH9qnuk8fPV5DtquE4q182BnYEAqG9z/package-migration-planner@0.1.0 --json
nipmod install --plan pkg:did:key:z6Mkp7vpuGY1bRKZNHH9qnuk8fPV5DtquE4q182BnYEAqG9z/package-migration-planner@0.1.0 --json

Package Evidence

first-user-onboarding

Guide a new user through install, inspect, add, audit and publish dry run.

Ready

Trust: verified/100
Quality: 100/100
Permissions: quiet

nipmod inspect pkg:did:key:z6Mkho169M47Pu8rZmLqkBpCEzGAW6SCA8MXsH6YwEAjtLM4/first-user-onboarding@0.1.0 --json
nipmod install --plan pkg:did:key:z6Mkho169M47Pu8rZmLqkBpCEzGAW6SCA8MXsH6YwEAjtLM4/first-user-onboarding@0.1.0 --json

Package Evidence

external-review-packet

Prepare a complete external review packet from Nipmod proof and gate output.

Ready

Trust: verified/100
Quality: 100/100
Permissions: quiet

nipmod inspect pkg:did:key:z6MktDAiA6JWkGr5oLe9pDmygCL73aaa6yud93Hzyh2DUHjF/external-review-packet@0.1.0 --json
nipmod install --plan pkg:did:key:z6MktDAiA6JWkGr5oLe9pDmygCL73aaa6yud93Hzyh2DUHjF/external-review-packet@0.1.0 --json

Package Evidence

agent-runtime-compat-check

Check whether an agent host can safely run Nipmod install, audit and MCP flows.

Ready

Trust: verified/100
Quality: 100/100
Permissions: quiet

nipmod inspect pkg:did:key:z6MkwNvgoxc794HjwtR9wbNYwXgnw8SoBQr19ve1NQqEZdEQ/agent-runtime-compat-check@0.1.0 --json
nipmod install --plan pkg:did:key:z6MkwNvgoxc794HjwtR9wbNYwXgnw8SoBQr19ve1NQqEZdEQ/agent-runtime-compat-check@0.1.0 --json

Package Evidence