Getting started
Start on Try Verify for the browser demo, or clone the repository and run the CLI locally. Neither requires an account.
Docs
Curated docs, not a mirror of the source archive.
This is not every file in the source snapshot. It is the subset a reader needs, organised around the questions people actually ask.
Concepts
Artifact, identity, evidence, policy, assessment, authority, effect — read How it works for the full chain, with the boundary drawn where the source puts it.
Results
record_valid, security_assessment_status (PASS / FAIL / NO_CONSTA) and release_authority are three separate axes. See Evidence for real kernel output demonstrating each.
Evidence
Evidence nodes and five relations — supports, contradicts, derivedFrom, measures, describes. Never authorizes.
Policies
A policy declares required claims, evidence kinds and meta-properties, and how absence should be read. Unrecognised fields are rejected, not ignored.
Artifacts
Identity is a pinned digest, supplied from outside and compared, never asserted by the artifact itself.
CLI
verify hash, inspect, kernel-evaluate, demo, explain, doctor — see the Terminal page for full usage and real example output.
API
A published OpenAPI contract. See the API page — status: "Specified, not built", no service running.
CI/CD
Working GitHub Actions and shell examples that fail closed on FAIL or NO_CONSTA. See CI/CD.
AI agents
A worked local example applying the same decision chain to an agent's proposed action. See AI agents.
Architecture
Simple and technical views of the reference kernel and its boundary. See Architecture.
Limits
Every known limit, sourced. See Status & limits — read this before you rely on anything else here.
Glossary
NO_CONSTA: not enough evidence to answer safely. record_valid: the record is structurally interpretable. release_authority: whether the kernel itself grants permission to act — always false in this candidate.