Comments
>log in to commentI built GitProof to turn ordinary Git timestamps into legally‑recognizable evidence, using RFC 3161 timestamps and Merkle‑DAG provenance while keeping the source local. It lets you seal a repo with `$gproof seal`, then verify and export a self‑authenticating PDF. Please try the seal command and let me know what, if anything, breaks.
- Source‑Local Cryptographic Privacy: code hashed 100% locally
- Independent RFC 3161 timestamping for verifiable provenance
- Turn Git repository snapshots into legal audit evidence
- CLI integrates with CI/CD for automated sealing
GitProof creates cryptographic, legally-verifiable timestamps and provenance certificates for Git repository snapshots.
- for
- Developers and legal teams needing audit-ready proof of code existence.
- pricing
- freemium
- license
- MIT
- v1.0.42GitProof v1.0.42 — Signed Binaries & Checksums2 hours ago
- v1.0.41GitProof v1.0.41 — Signed Binaries & Checksums3 hours ago
- v1.0.40GitProof v1.0.40 — Signed Binaries & Checksums3 hours ago
Key features
- RFC 3161 Notarization — Anchors repository Merkle root to public timestamp authorities like DigiCert and Sectigo.
- Merkle DAG Provenance — Computes deterministic SHA-256 Merkle DAG of all Git objects for tamper-evident proof.
- Offline & Local Privacy — All hashing is done locally; only blind SHA-256 digests are sent to TSA.
- Self-Authenticating PDF Export — Generates FRE 902 vector PDF certificates with optional 28 U.S.C. §1746 declaration.
- Automated Git Hooks — Pre-commit and pre-push hooks automatically create proof.json attestations.
- Badge & Profile Shields — Live SVG badges show sealed status and can be embedded in READMEs.
Use cases
- Create court-admissible evidence of code state for M&A due diligence
- Seal every release tag in CI/CD pipelines automatically
- Provide clients with verifiable audit PDFs for compliance reviews
GitProof pricing
- Community$0Open-source CLI · Public RFC 3161 notarization · Watermarked evaluation PDF
- Pro Solo Lifetime$79one-timeUnwatermarked PDF exports · Corporate entity binding · Multi-TSA notarization
- Team$290/yearAll Pro features · Centralized audit log · Up to 10 seats
GitProof FAQ
How does GitProof keep my source code private?+
All hashing is performed locally; only a blind 32-byte SHA-256 digest is sent to the timestamp authority.
What legal standards does GitProof support?+
It produces evidence that complies with U.S. Federal Rules of Evidence 902(11,13,14) and 28 U.S.C. §1746 declarations.
Can I use GitProof in CI/CD pipelines?+
Yes, a ready-to-use GitHub Actions workflow seals tags or merges automatically.
Is there a free version?+
The Community tier is free forever and includes the open-source verifier and watermarked PDF specimens.
What formats are exported for legal review?+
GitProof generates self-authenticating vector PDF certificates (FRE 902) and optional SVG badges.
Do I need a license for the CLI?+
The CLI is open source under MIT; a Pro license is required only for unwatermarked PDFs and enterprise features.
Summarized by DevHunt from gitproof.legendrail.com · Oct 18, 2026. Details may change; check the official site.
