Turn Git Repository Snapshots into Verifiable Legal & Audit Evidence.
Three simple commands seamlessly integrated into standard developer muscle memory.
Computes the Merkle DAG across all blobs and anchors an atomic RFC 3161 public TSA timestamp.
$gproof seal
Cryptographically validates commit integrity and the TSA certificate chain without internet access.
$gproof verify
Compiles a self-authenticating vector PDF certificate with a 28 U.S.C. § 1746 declaration.
$gproof cert
Enterprise source code protection without exposing private repositories.
Direct cryptographic timestamping against DigiCert and Sectigo Time Stamp Authorities (TSA). Cryptographically verifiable evidence that code existed at an exact second.
Deterministic Git tree hashing using SHA-256 leaves. Cryptographic proof of commit content and directory structure with zero data leaks.
Direct vector rendering of exhibits formatted to support self-authentication under 28 U.S.C. § 1746 and FRE 902. A § 1746 declaration tied to a cryptographic hash and atomic timestamp.
Your source code never leaves your machine. The standalone verifier is 100% open source under MIT. Zero telemetry, zero analytics, zero external API dependencies.
One-command install for `pre-commit` and `pre-push` hooks. Automatically generates tamper-proof `proof.json` attestation before every push.
Single statically linked Go binary. Native Git plugin integration. Self-upgrades in milliseconds with cryptographically signed release manifests.
A statutory declaration, tied to a hash, tied to a public timestamp—the standard an engineer and a lawyer can stand on.
"A record generated by an electronic process or system that produces an accurate result... [or] data copied from an electronic device, storage medium, or file, if authenticated by a process of digital identification."
"The original or a copy of a domestic record that meets the requirements of Rule 803(6)(A)-(C)... kept in the course of a regularly conducted activity... as shown by a certification of the custodian."
"Wherever, under any law of the United States... any matter is required or permitted to be supported by sworn declaration... such matter may be supported by unsworn declaration in writing under penalty of perjury."
Following the Supreme Court ruling in Thaler v. Perlmutter and U.S. Copyright Office guidance, purely machine-generated code possesses zero copyright protection; applicants must demonstrate iterative human control, modification, and arrangement.
Self-authenticating electronic record format with 28 U.S.C. Sec. 1746 declaration, Merkle DAG root, and DigiCert RFC 3161 notary medallion seal. Designed to support electronic-evidence authentication workflows.
Real-time SVG shields showing verified commit authorship and timestamp notarization.
Embed in markdown: [](https://gitproof.legendrail.com)
Drop a 10-line workflow into your repository. Automatically notarize every release tag or main branch merge with RFC 3161 timestamps.
name: GitProof Notarization
on:
push:
tags: ['v*']
jobs:
prove:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
with:
fetch-depth: 0
- name: Cryptographic Provenance Seal
uses: LEGEND-Rail/gitproof-action@v1
with:
license-key: ${{ secrets.GITPROOF_KEY }} # Optional Pro/Team license key
license-key for Pro/Team unwatermarked certificates.Open-source verification is free forever. Upgrade to Pro for unwatermarked FRE 902 court exhibits and Corporate LLC binding.
--entity "Your Company LLC".Individual developers evaluating open cryptographic authorship proofs.
proof.json)Perpetual license for GitProof Pro v1.x, with an offline license key.
proof.json. The original timestamp remains unchanged, and the new certificate's generation date is shown separately.
Future major versions and support entitlements are subject to the published license terms.
Engineering teams needing centralized co-authorship and compliance audits.