Git commit timestamps are trivially forged. Pure AI-generated code has zero copyright protection. GitProof creates tamper-evident, independently verifiable records of repository state using SHA-256 Merkle proofs and atomic RFC 3161 public timestamps — without uploading your source code.
Three simple commands seamlessly integrated into standard developer muscle memory.
Computes the Merkle DAG across all blobs and anchors an atomic RFC 3161 public TSA timestamp.
$gproof seal
Cryptographically validates commit integrity and the TSA certificate chain without internet access.
$gproof verify
Compiles a self-authenticating vector PDF certificate with sworn 28 U.S.C. § 1746 declaration.
$gproof cert
Enterprise source code protection without exposing private repositories.
Direct cryptographic timestamping against DigiCert and Sectigo Time Stamp Authorities (TSA). Irrefutable legal proof that code existed at an exact second.
Deterministic Git tree hashing using SHA-256 leaves. Cryptographic proof of commit content and directory structure with zero data leaks.
Direct vector rendering of self-authenticating certificates ready for execution under 28 U.S.C. § 1746 and FRE 902. A sworn statement tied to a hash that stands in court.
Your source code never leaves your machine. The standalone verifier is 100% open source under MIT. Zero telemetry, zero analytics, zero external API dependencies.
One-command install for `pre-commit` and `pre-push` hooks. Automatically generates tamper-proof `proof.json` attestation before every push.
Single statically linked Go binary. Native Git plugin integration. Self-upgrades in milliseconds with cryptographically signed release manifests.
A sworn statement, tied to a hash, tied to a public timestamp—the standard an engineer and a lawyer can stand on.
"A record generated by an electronic process or system that produces an accurate result... [or] data copied from an electronic device, storage medium, or file, if authenticated by a process of digital identification."
"The original or a copy of a domestic record that meets the requirements of Rule 803(6)(A)-(C)... kept in the course of a regularly conducted activity... as shown by a certification of the custodian."
"Wherever, under any law of the United States... any matter is required or permitted to be supported by sworn declaration... such matter may be supported by unsworn declaration in writing under penalty of perjury."
Following the Supreme Court ruling in Thaler v. Perlmutter and U.S. Copyright Office guidance, purely machine-generated code possesses zero copyright protection; applicants must demonstrate iterative human control, modification, and arrangement.
Self-authenticating electronic record with 28 U.S.C. Sec. 1746 sworn declaration, Merkle DAG root, and DigiCert RFC 3161 notary medallion seal.
Real-time SVG shields showing verified commit authorship and timestamp notarization.
Embed in markdown: [](https://gitproof.legendrail.com)
Drop a 10-line workflow into your repository. Automatically notarize every release tag or main branch merge with RFC 3161 timestamps.
name: GitProof Notarization
on:
push:
tags: ['v*']
jobs:
prove:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
with:
fetch-depth: 0
- name: Install GitProof
run: curl -sSL https://gitproof.legendrail.com/install.sh | bash
- name: Seal Release
run: gproof seal --publish
env:
GITPROOF_KEY: ${{ secrets.GITPROOF_KEY }} # Optional Pro/Team license key
GITPROOF_KEY secret for Pro/Team unwatermarked certificates.
Open-source verification is free forever. Upgrade to Pro for unwatermarked FRE 902 court exhibits and Corporate LLC binding.
Individual developers evaluating open cryptographic authorship proofs.
proof.json)Solo founders, consultants & creators defending proprietary commercial IP.
--entity)GITPROOF_KEY)Engineering teams needing centralized co-authorship and compliance audits.