Skip to content

Latest commit

 

History

History
7 lines (4 loc) · 1.09 KB

File metadata and controls

7 lines (4 loc) · 1.09 KB

Shipmoor

Shipmoor is a local, vendor-neutral verification layer for AI-agent-written code. Its Claim Check feature freezes a change's stated intent into an acceptance set of atomic, checkable obligations, then binds each one to real evidence: the build, the test suite, deterministic scans, and an advisory code review.

Every piece of that evidence is wrapped in an in-toto attestation. The resulting verdict (READY, READY WITH GAPS, BLOCKED, or INCONCLUSIVE) ships as a SLSA-shaped Verification Summary Attestation (VSA) with a self-digest. Rather than trusting a rerun's word for it, Shipmoor checks whether two runs match byte-for-byte.

The whole loop runs locally: no model is hosted or called by Shipmoor, and no source code is uploaded. See how Claim Check works for the full design, including the bring-your-own-judge model used for the obligations a deterministic check can't yet reach.