Open Integrity Project (an Open Development initiative hosted by Blockchain Commons LLC)
๐ก Open Integrity Project: Cryptographic Roots of Trust for Open Source Development
The Open Integrity Project integrates cryptographic trust mechanisms into Git repositories, enabling them to serve as cryptographic roots of trust to ensure verifiable chains of integrity, provenance, and authorship. By leveraging Git's native SSH-based signing capabilities and structured verification processes, Open Integrity ensures transparency and immutability for software projects without requiring modifications to Git itself.
๐ฏ Project Goals
- Immutable Proof-of-Origin โ Verify the authenticity of software artifacts
- Signed Commits & Tags โ Ensure authorship integrity through SSH signatures (~128-bit security)
- Tamper Detection โ Maintain verifiable repository history
- Trust Delegation โ Enable controlled transition from inception key to authorized signers
- Platform-Agnostic Validation โ Work across GitHub, GitLab, and self-hosted solutions
๐ก Learn More
- ๐ Documentation โ Documentation Hub, with problem statement, architecture, and guides
- ๐ ๏ธ Tools & Scripts โ Tools for creating and verifying Open Integrity repositories
- ๐ฌ Discussions โ Join the conversation
๐ค Get Involved
We welcome contributions from developers, security experts, and open-source enthusiasts.
- โญ Star our repositories to show support
- ๐ข Sharing your discoveries with your network
- ๐ฌ Ask a question or engage in discussions in our Community Discussions
- โ๏ธ Report an issue in our Issue Tracker
- ๐ Find Good First Issues to get started
- ๐๏ธ Review our Contribution Guide
- ๐ฐ Become a financial patron to our host Blockchain Commons via GitHub Sponsors
๐ Copyright & License
Unless otherwise noted, all files are ยฉ2025 Open Integrity Project / Blockchain Commons LLC., and licensed under the BSD 2-Clause Plus Patent License โ See LICENSE for details.
๐ About Us
The Open Integrity Project is an Open Development initiative hosted by Blockchain Commons, dedicated to advancing open, interoperable, secure & compassionate digital infrastructure, and embracing the Gordian Principles of independence, privacy, resilience, and openness.