Apache-2.0 · free permanently

Sign who authorized
the agent.

Git signatures prove who pushed. Matrix Scroll records who authorized the agent that did the work, and lets anyone check it offline.

pip install "matrixscroll==0.6.2"
Get it on PyPI Verify a file

Docs Spec Source

Envelope appended at commit time Verified offline
--- METADATA ENVELOPE --- Signature valid
schema: matrixscroll.commit_envelope.v1
provenance.actor_type: agent
provenance.tool: github-copilot-chat
signature.alg: ed25519
signature.public_key: ed25519_9a38f8...d4e1a
Records a declared origin: the actor and tool are self-reported. Verifying proves the record came from the key holder and has not been altered, not that the declaration is true. Read the envelope spec →

Start here

Install it, then verify something you did not sign.

The protocol is the package. Signing, hooks, the MCP server and the verifier all ship in one dependency for Python 3.10 and up. Verification never contacts a server, so you can check the claims on this page against the code before you trust any of it.

Install guide Scan an MCP surface Maintained by SSX360

SSX360 sells assessments and never this protocol. Matrix Scroll earns no revenue, permanently. No keys are held on your behalf.

Honest limits

What ships, and what does not.

Software-emulated Ed25519 keys ship today. NXP SE050 secure-element signing and the Pico 2 W display bring-up are bench prototypes that share the same verifier contract. Neither is generally available, and neither is a product you can buy.

The optional post-quantum overlay implements ML-DSA and SLH-DSA through liboqs. That is an algorithm implementation, not a CMVP-validated module, and liboqs itself states it should not be relied on to protect sensitive data. We repeat that rather than bury it.