forgeproof-plugin

Create provenance-tracked code from a GitHub issue with a cryptographically signed audit trail. Use when the user asks to "forgeproof an issue", "create a provenance bundle", "generate auditable code from an issue", or wants cryptographically signed proof of AI-generated work. Supports Python, TypeScript/JavaScript, and Go projects. Invoke with an issue number or without one to browse assigned issues.

Push a ForgeProof branch and open a pull request with provenance metadata embedded in the PR description. Use after running /forgeproof:run to create a PR from the generated code. Triggers on "push forgeproof", "create PR from forgeproof", or "open pull request with provenance".

Verify a ForgeProof provenance bundle (.rpack file). Use when the user asks to "verify a bundle", "check provenance", "validate an rpack", "verify forgeproof", or wants to confirm that AI-generated code has not been tampered with since signing. Supports verifying bundles from other repositories or PRs.

Clean up ForgeProof local state for an issue or all issues. Deletes provenance chains, bundles, ephemeral keys, and optionally branches. Use when you need to re-run ForgeProof on an issue or clean up after testing. Triggers on "reset forgeproof", "clean up forgeproof", or "forgeproof reset".