# Matrix Scroll

Matrix Scroll is an open-source authorization-evidence protocol for agent-assisted Git. It creates signed local envelopes for AI-assisted changes — signed at the source — so teams can verify declared actor/tool metadata offline, gate protected branches in CI, and export audit evidence without uploading source code.

Primary links:
- Website: https://matrixscroll.com/
- Specification: https://matrixscroll.com/spec/
- Documentation: https://matrixscroll.com/docs/
- Browser verifier: https://matrixscroll.com/verify/
- Try it (quickstart + tamper demo): https://matrixscroll.com/try
- MCP Trust Scanner (browser, offline): https://matrixscroll.com/scan
- Comparison: https://matrixscroll.com/compare/
- Threat model: https://matrixscroll.com/docs/threat-model.html
- Protocol flow: https://matrixscroll.com/docs/protocol-flow.html
- Commit envelope schema: https://matrixscroll.com/schemas/commit-envelope.v1.json
- Release manifest schema: https://matrixscroll.com/schemas/release-manifest.v1.json
- Evidence pack schema: https://matrixscroll.com/schemas/evidence-pack.v1.json
- PyPI package: https://pypi.org/project/matrixscroll/
- GitHub repository: https://github.com/SSX360/matrixscroll
- CI verify action: https://github.com/SSX360/matrixscroll-verify-action

Commercial control plane:
- SSX360: https://ssx360.com/
- Trust model: https://ssx360.com/trust
- Enterprise brief: https://ssx360.com/enterprise
- Authorization Pilot ($999): https://pilot.ssx360.com

Important scope (Honest limits):
- Matrix Scroll signs and verifies commit provenance; it does not replace scanners, branch protection, Sigstore, SLSA, or build artifact attestations.
- Emulated software signing (Ed25519) ships today. SE050 M1 PoC is complete and bench-validated (Jul 2026: non-exportable Ed25519 keys, verified against the browser verifier and CLI); production hardware signing remains preview — not GA until productized.
- Compliance language is evidence mapping (SSDF, SLSA, EU AI Act traceability, Five Eyes agentic-AI guidance), not certification or customer endorsement.
- Illustrative deployment profiles are not endorsements or existing customer relationships.
- Codebase direction: https://matrixscroll.com/docs/DOCTRINE.html
- Front-end perfection pass (static-site scope): https://github.com/SSX360/digital-rain/blob/main/docs/FRONTEND.md (full pass); matrixscroll-site/docs/FRONTEND.md on GitHub (not web-served)