The Open Integrity Project integrates cryptographic trust mechanisms into Git repositories, enabling them to serve as cryptographic roots of trust to ensure verifiable chains of integrity, provenance, and authorship. By leveraging Git's native SSH-based signing capabilities and structured verification processes, Open Integrity ensures transparency and immutability for software projects without requiring modifications to Git itself.
- Immutable Proof-of-Origin – Verify the authenticity of software artifacts
- Signed Commits & Tags – Ensure authorship integrity through SSH signatures (~128-bit security)
- Tamper Detection – Maintain verifiable repository history
- Trust Delegation – Enable controlled transition from inception key to authorized signers
- Platform-Agnostic Validation – Work across GitHub, GitLab, and self-hosted solutions
- 📖 Documentation — Documentation Hub, with problem statement, architecture, and guides
- 🛠️ Tools & Scripts — Tools for creating and verifying Open Integrity repositories
- 💬 Discussions — Join the conversation
We welcome contributions from developers, security experts, and open-source enthusiasts.
- ⭐ Star our repositories to show support
- 📢 Sharing your discoveries with your network
- 💬 Ask a question or engage in discussions in our Community Discussions
- ✍️ Report an issue in our Issue Tracker
- 🔎 Find Good First Issues to get started
- 🏗️ Review our Contribution Guide
- 💰 Become a financial patron to our host Blockchain Commons via GitHub Sponsors
Unless otherwise noted, all files are ©2025 Open Integrity Project / Blockchain Commons LLC., and licensed under the BSD 2-Clause Plus Patent License – See LICENSE for details.
The Open Integrity Project is an Open Development initiative hosted by Blockchain Commons, dedicated to advancing open, interoperable, secure & compassionate digital infrastructure, and embracing the Gordian Principles of independence, privacy, resilience, and openness.