Welcome to Signetry — start here (and how to contribute)

[bkd-dotcom]

Welcome to Signetry 👋

Signetry is a change-control plane for coding agents — it decides how much authority an agent's change has earned and proves it with a signed receipt. It also finds vulnerabilities (signetry scan, 7 languages, cross-file taint, SARIF) and can govern the fix end-to-end (signetry scan --fix → admission pipeline → Ed25519 receipt → branch-only PR, never merges).

On a public 52-case, 7-language benchmark, the detection engine reaches 100% recall at 0 false positives — matching/leading a top LLM scanner while staying deterministic, offline, and free. Detection is table stakes; the governance on top (earned authority, prompt-injection quarantine, independent verifier, signed receipts) is what the scanners don't attempt.

Where to start

I want to…	Go to
Understand the design	ARCHITECTURE.md
Install it	INSTALL.md
Pick a repo	INTEGRATIONS.md
Contribute	see below 👇

Contributing — good first issues

Well-scoped good first issues with exact files + acceptance criteria:

• core — the kernel (detection rules & executor adapters)
• eval — the benchmark (add a test case)
• reviewer — deterministic PR-diff checks

Each repo has a CONTRIBUTING.md, CLA.md, and CODE_OF_CONDUCT.md. The lowest-barrier first PR is adding a detection corpus case in eval.

Install

pip install "signetry-core @ git+https://github.com/Signetry/core@v0.6.0"

Ground rules

• Governance logic lives only in signetry-core; integrations adapt agents to it.
• auto_merge is always false — a human merges.
• Bring-your-own-key for anything that runs a live agent; keys are never shared or leaked.

Say hi in General, ask in Q&A, propose in Ideas. Glad you're here. 🪪

---

Licensing & contribution terms (please read)

Signetry is source-available, not open source — All Rights Reserved © 2026 Binay Dalai. You're welcome to read the code, evaluate it, and contribute, but:

• ✅ You can contribute and be credited (CONTRIBUTORS.md, Git history, release notes), and truthfully say you contributed.
• ❌ You cannot use, sell, sublicense, or commercialize it, or present it as your own work/brand.
• Contributions are accepted under a Contributor License Agreement (a bot asks you to sign on your first PR): you assign copyright/ownership of your contribution to the owner, who alone may use and monetize the project.

Signet = the seal that authenticates a document. Signetry seals a verified change. 🪪