Signed Audit Trails

Plugin Verified Active

Teaching skill: signed audit trails for Claude Code tool calls. Cookbook-style walkthrough of Cedar-gated tool calls with Ed25519 receipts, offline verification, and CI/CD integration. Pairs with the protect-mcp plugin.

1 Skill 0 MCPs

Purpose

To educate users on the implementation and benefits of cryptographically signed audit trails for tool calls, enabling tamper-evident evidence of agent behavior.

Features

Cookbook-style walkthrough of signed audit trails
Ed25519 receipts for tool call verification
Cedar policy integration for pre-execution checks
Offline verification of receipt chains
CI/CD integration examples

Use Cases

Learning cryptographic patterns for agent behavior
Evaluating the suitability of signed audit trails for compliance needs
Teaching team members about tamper detection mechanisms
Demonstrating auditable agent actions to clients or regulators

Non-Goals

Providing runtime hooks for production use (direct users to `protect-mcp`)
Automating the deployment of signed audit trails without user interaction
Covering every possible cryptographic receipt implementation

Practical Utility

info:Production readinessThe extension is a teaching skill and explicitly states that the `protect-mcp` plugin is for production use, making its current state appropriate for its stated purpose.

Execution

info:Pinned dependenciesWhile Node.js and npm are assumed, specific dependency pinning is managed by npm/package.json for the `protect-mcp` tool, which is standard practice.

Installation

First, add the marketplace

/plugin marketplace add wshobson/agents

/plugin install signed-audit-trails@claude-code-workflows

Contains 1 extensions

Skill (1)

Signed Audit Trails Recipe Skill

Step-by-step cookbook for setting up cryptographically signed audit trails on Claude Code tool calls. Use when explaining, evaluating, or demonstrating the pattern before committing to the protect-mcp runtime hooks. Covers Cedar policy, Ed25519 receipts, offline verification, tamper detection, CI/CD integration, and SLSA composition.

Quality Score

Verified

95 /100

Analyzed 7 days ago

Trust Signals

Last commit9 days ago

GitHub owner wshobson

Stars35.3k

LicenseMIT

Websitesethhobson.com

Status

View Source

Similar Extensions

Protect Mcp

Cedar policy enforcement + Ed25519 signed receipts for every Claude Code tool call. First cryptographic governance plugin — receipts independently verifiable offline.

Plugin

wshobson

Constant Time Analysis

Detect compiler-induced timing side-channels in cryptographic code

Plugin

trailofbits