Packages
Evidence
Proof humans can read.
The registry still publishes raw JSON for agents. The website now explains each proof first, then exposes the machine file as an explicit verification link.
Verified registry
Witnesses
Root hash
Quarantine
Yanked
Package
first-user-onboarding
Guide a new user through install, inspect, add, audit and publish dry run.
- Canonical
- pkg:did:key:z6Mkho169M47Pu8rZmLqkBpCEzGAW6SCA8MXsH6YwEAjtLM4/first-user-onboarding@0.1.0
- Digest
- 88e60e6e3fdd29fda4aeb07bf8a4b7dc42c532631d71b6f505973cb6475013f2
- Publisher
- did:key:z6Mkho169M47Pu8rZmLqkBpCEzGAW6SCA8MXsH6YwEAjtLM4
- Source
- 1b6212908a6b1baf03dbc47251c39d01c8b1348a
- Trust
- verified/100
Artifacts
What each proof means
Discovery
The manifest agents use to find the registry, installer, advisory feed, transparency log and witness.
Machine fileRegistry
The package index carrying signed package evidence, digests, source commits, compatibility receipts and warnings.
Machine fileCheckpoint
The current transparency tree head. It pins root hash, tree size, timestamp and log identity.
Machine fileAdvisories
The signed safety feed used to warn or block risky package versions without deleting Gitlawb content.
Machine fileSecurity policy
The public reporting route for vulnerabilities, package incidents and registry trust failures.
Machine fileProof transcript
A machine readable record of the demo path: inspect, install, audit and blocked unsafe manifests.
Machine fileReview packet
The machine readable audit handoff with targets, commands, claim boundaries and sign off fields.
Machine fileEvidence manifest
The index of public review artifacts, live health endpoints and proof files reviewers can reproduce.
Machine fileEvidence ledger
The adoption and review receipt ledger. It stays at zero until external redacted evidence exists.
Machine fileSynthetic monitor
The reproducible monitor command for site, registry, advisories, witness, node and Gitlawb receive pack probes.
Machine filePackage proof
Merkle proof for first-user-onboarding, bound to leaf db0f06c9b0ae6ced421d43f01044f74024db413da0519affc5a5edf99e23ca11.
Machine filePackage witness
Witness statement for first-user-onboarding, signed outside the registry log identity.
Machine fileRoots
Current pinned values
- Log
- did:key:z6MkugeJcjgGhG1EpUMhhJ1Q5SoYn65T4cmiuBFE8E82TMyk
- Witness
- z6Mkv8WH...EkewWJ
- Checkpoint
- 3cc66da3292900a4ac482b2c301db5c6e0a00c2461847a29fec5275da7f631cf
- Tree size
- 32
- Generated
- 2026-05-16T21:44:02.000Z
- Registry
- https://nipmod.com/registry/packages.json
- Advisories
- https://nipmod.com/advisories.json