signet

name	signet
description	Cryptographic signing for every tool call with Ed25519 audit trail

/signet — Cryptographic Tool Call Signing

Signet is active. Every tool call is signed with Ed25519 and logged to a hash-chained audit trail at ~/.signet/audit/.

Agent identity: codex-agent (auto-generated on first use)

Audit Commands

View recent signed tool calls (requires signet CLI):

signet audit --since 1h

Verify hash chain integrity:

signet audit --verify

View raw audit log without CLI:

cat ~/.signet/audit/$(date +%Y-%m-%d).jsonl | jq '.receipt.action.tool'

Export audit report:

signet audit --export report.json --since 24h