Auths Supply Chain Shield
Hardware-Backed Commit Signing & Zero-CA Automated Provenance
Eliminate centralized Certificate Authorities. Sign developer commits with hardware keys (Secure Enclave P-256) and generate SLSA Level 3 release provenance verifiable 100% offline.
Supply Chain Shield Verification Flow
Developer creates git commit locally. Auths hook intercepts commit payload.
Hardware-Anchored SLSA L3 Release Provenance
Eliminate centralized Certificate Authorities and vulnerable CI runner credentials. Every release binary is signed directly by maintainer hardware keys (Secure Enclave / Passkeys) and attested via in-toto SLSA Level 3 statements verifiable 100% offline.
Hardware Commit Signing & SLSA L3
Zero-CA software supply chain security. Replace brittle certificate authorities with hardware keys and Git-native provenance.
# Install Auths Git commit hook locally
auths commit-hooks install
# Automatically signs commits using Secure Enclave P-256 key
git commit -m "feat(core): implement SLSA provenance"Biometric Secure Enclave
Signing keys are generated in hardware (macOS Touch ID / TPM 2.0). Keys can never be exported or leaked by malware.
SLSA Level 3 Release Guard
Automatically generates cryptographically signed in-toto SLSA Level 3 statements for release artifacts.
Zero-CA Architecture
No reliance on central Certificate Authorities or third-party web servers. Uses Git commit graph & key event logs.
Offline Browser & CLI Audit
Verifies release bundles 100% offline using WebAssembly or auths CLI without network calls.