[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"project-93599":3},{"id":4,"name":5,"fullName":6,"owner":7,"repo":5,"description":8,"homepage":9,"htmlUrl":10,"language":11,"languages":10,"totalLinesOfCode":10,"stars":12,"forks":13,"watchers":14,"openIssues":15,"contributorsCount":15,"subscribersCount":15,"size":15,"stars1d":16,"stars7d":16,"stars30d":16,"stars90d":15,"forks30d":15,"starsTrendScore":17,"compositeScore":18,"rankGlobal":10,"rankLanguage":10,"license":19,"archived":20,"fork":20,"defaultBranch":21,"hasWiki":22,"hasPages":20,"topics":23,"createdAt":10,"pushedAt":10,"updatedAt":24,"readmeContent":25,"aiSummary":10,"trendingCount":15,"starSnapshotCount":15,"syncStatus":26,"lastSyncTime":27,"discoverSource":28},93599,"machine-genome","paxlabs-inc\u002Fmachine-genome","paxlabs-inc","Machine Genome is an open identity and provenance protocol for models, agents, harnesses, datasets, and the artifacts that connect them.","https:\u002F\u002Fmachinegenome.org\u002F",null,"Go",284,48,13,0,167,501,95.07,"Apache License 2.0",false,"main",true,[],"2026-07-22 04:02:09","\u003Cp align=\"center\">\n  \u003Cimg src=\"docs\u002Fassets\u002Fmachine-genome-mark.svg\" width=\"88\" height=\"88\" alt=\"Machine Genome mark\">\n\u003C\u002Fp>\n\n# Machine Genome\n\n[![Conformance](https:\u002F\u002Fgithub.com\u002Fpaxlabs-inc\u002Fmachine-genome\u002Factions\u002Fworkflows\u002Fci.yml\u002Fbadge.svg)](https:\u002F\u002Fgithub.com\u002Fpaxlabs-inc\u002Fmachine-genome\u002Factions\u002Fworkflows\u002Fci.yml)\n[![CodeQL](https:\u002F\u002Fgithub.com\u002Fpaxlabs-inc\u002Fmachine-genome\u002Factions\u002Fworkflows\u002Fcodeql.yml\u002Fbadge.svg)](https:\u002F\u002Fgithub.com\u002Fpaxlabs-inc\u002Fmachine-genome\u002Factions\u002Fworkflows\u002Fcodeql.yml)\n[![Go Reference](https:\u002F\u002Fpkg.go.dev\u002Fbadge\u002Fgithub.com\u002Fpaxlabs-inc\u002Fmachine-genome.svg)](https:\u002F\u002Fpkg.go.dev\u002Fgithub.com\u002Fpaxlabs-inc\u002Fmachine-genome)\n[![License: Apache-2.0](https:\u002F\u002Fimg.shields.io\u002Fbadge\u002Fcode-Apache--2.0-blue.svg)](LICENSE)\n[![Protocol: experimental](https:\u002F\u002Fimg.shields.io\u002Fbadge\u002Fprotocol-experimental-8b5cf6.svg)](docs\u002Fversioning.md)\n\nMachine Genome is an open identity and provenance protocol for models, agents,\nharnesses, datasets, and the artifacts that connect them. Every immutable,\nsigned genesis record receives a content-addressed **Gene**. Genes form a\nverifiable lineage graph; later amendments and third-party attestations add\nevidence without rewriting history.\n\n**Live registry:** [machinegenome.org](https:\u002F\u002Fmachinegenome.org) ·\n**Protocol:** [MGS 0.1.1 implementation profile](spec\u002FMGS-0.1.1-implementation-profile.md) ·\n**API:** [OpenAPI 3.1](api\u002Fopenapi.json)\n\n> [!IMPORTANT]\n> MGS is an experimental interoperability profile and this repository is one\n> reference implementation. A record proves who signed a claim and what bytes\n> were committed; it does not prove inherited capability, consciousness,\n> ownership, vendor endorsement, or legal status.\n\n## Why this exists\n\nModern agents are assembled from model weights, prompts, scaffolds, tools,\ndatasets, and runtime policy. Names alone cannot answer which exact components\nwere used, who asserted the relationship, or whether the evidence changed.\nMachine Genome provides:\n\n- **stable identity** — a Gene is a SHA-256 multihash of a secured canonical\n  genesis record;\n- **explicit lineage** — typed parent edges distinguish authorized,\n  operator-observed, and unresolved relationships;\n- **cryptographic accountability** — W3C `eddsa-jcs-2022` proofs bind records\n  to controller DIDs;\n- **append-only evolution** — ordered amendments and independent attestations\n  add history without mutating genesis;\n- **public transparency** — registries provide canonical bytes, inclusion and\n  consistency proofs, signed checkpoints, conflict evidence, and tombstones.\n\nThe implementation has no dependency on a blockchain, a specific model vendor,\nPrometheus, Matrix, or a proprietary DID resolver. The current profile resolves\nEd25519 `did:key` identities offline.\n\n## What is included\n\n| Area | Deliverable |\n| --- | --- |\n| Protocol | Byte-exact MGS `0.1.1` implementation profile and audit trail |\n| Go library | Strict JCS, multihash Genes, Data Integrity, lineage, amendments, attestations |\n| Registry | ACID storage, verified admission, DNS namespace control, Merkle log, audit chain |\n| Explorer | Responsive, plain-language identity, lineage, artifact, and proof views |\n| CLI | Key generation, authoring, signing, verification, digest, backup, and integrity tools |\n| Contracts | JSON Schemas, OpenAPI 3.1 document, and machine-readable conformance vectors |\n| Operations | Hardened systemd, nginx\u002FCloudflare, container, backup, restore, and monitoring assets |\n\nSee [project status](docs\u002Fstatus.md) for the precise implemented, validated, and\ndeferred boundaries.\n\n## Quick start\n\nRequirements: Go 1.24 or newer, GNU Make, and `jq`.\n\n```sh\ngit clone https:\u002F\u002Fgithub.com\u002Fpaxlabs-inc\u002Fmachine-genome.git\ncd machine-genome\nmake check build\n\nbin\u002Fmgs keygen --out controller.key.json\nbin\u002Fmgs init-genesis \\\n  --key controller.key.json \\\n  --name cody \\\n  --namespace example.org \\\n  --subject-type agent \\\n  --version 1.0.0 \\\n  --out genesis.unsigned.json\nbin\u002Fmgs sign \\\n  --in genesis.unsigned.json \\\n  --key controller.key.json \\\n  --out genesis.json\nbin\u002Fmgs verify --in genesis.json\nbin\u002Fmgs gene --in genesis.json\n```\n\nPrivate key files are created with mode `0600`. Never commit keys, registry\ntokens, or private evidence.\n\n### Run a local registry\n\n```sh\nbin\u002Fmgs keygen --out registry-checkpoint.key.json\numask 077\nopenssl rand -hex 32 > admin.token\n\nbin\u002Fmgs registry-serve \\\n  --data-dir .\u002Fregistry-data \\\n  --checkpoint-key registry-checkpoint.key.json \\\n  --admin-token-file admin.token \\\n  --listen 127.0.0.1:8080 \\\n  --public-base-url http:\u002F\u002F127.0.0.1:8080\n```\n\nOpen \u003Chttp:\u002F\u002F127.0.0.1:8080>. DNS namespaces must complete the registry's\n`dns-01` controller challenge before their first genesis is admitted. DID\nnamespaces are accepted when the namespace equals the signing controller DID.\n`--allow-unverified-namespaces` is for isolated development only.\n\nFor a production deployment, follow the\n[operations runbook](docs\u002Fregistry-operations.md) and\n[deployment asset guide](deploy\u002FREADME.md).\n\n## Architecture at a glance\n\n```text\nauthoring CLI \u002F library\n        │ secured MGS records\n        ▼\n  verification boundary ── strict JSON + JCS + DID + signature + lineage\n        │ admitted canonical bytes\n        ▼\n ACID object store ── indexes ── append-only Merkle log ── signed checkpoint\n        │                         │\n        ├── HTTP API              └── inclusion \u002F consistency proofs\n        └── provenance explorer\n```\n\nThe shared admission boundary is `registry.Store.Submit`; the HTTP service\ncannot bypass record verification. Read the full\n[architecture](docs\u002Farchitecture.md) and [threat model](docs\u002Fthreat-model.md)\nbefore extending trust or resolver behavior.\n\n## Documentation\n\n- [Documentation index](docs\u002FREADME.md)\n- [Concepts and trust semantics](docs\u002Fconcepts.md)\n- [Protocol implementation profile](spec\u002FMGS-0.1.1-implementation-profile.md)\n- [Protocol audit](docs\u002Fprotocol-audit.md)\n- [Registry HTTP API](docs\u002Fregistry-api.md) and [OpenAPI](api\u002Fopenapi.json)\n- [CLI reference](docs\u002Fcli.md)\n- [Architecture](docs\u002Farchitecture.md)\n- [Threat model](docs\u002Fthreat-model.md)\n- [Conformance and test vectors](docs\u002Fconformance.md)\n- [Production operations](docs\u002Fregistry-operations.md)\n- [Public registry policy](docs\u002Fregistry-policy.md)\n- [Versioning and compatibility](docs\u002Fversioning.md)\n- [Governance](GOVERNANCE.md), [security](SECURITY.md), and\n  [contributing](CONTRIBUTING.md)\n- [Roadmap](docs\u002Froadmap.md)\n\n## Development\n\n```sh\nmake help\nmake check       # tests, vet, schemas, API contract, docs, records\nmake race        # race detector\nmake coverage    # HTML and textual coverage report\nmake build       # static local binary\nmake dist        # release archives and checksums\n```\n\nCI repeats the conformance, race, build, record, repository, and vulnerability\nscans on every change. Tagged releases are built from a clean tree with\nchecksums and a software bill of materials.\n\n## Security and trust\n\nDo not report security vulnerabilities in a public issue. Follow\n[SECURITY.md](SECURITY.md) to use GitHub's private vulnerability reporting.\nCryptographic review, privacy review, independent witnesses, checkpoint gossip,\nfederation, and neutral standards governance remain explicit roadmap work.\n\n## License\n\nThe Go implementation and repository tooling are licensed under\n[Apache-2.0](LICENSE). Protocol and explanatory documentation are made\navailable under [CC BY 4.0](LICENSES\u002FCC-BY-4.0.txt). Signed registry records do\nnot grant rights in the external models, source repositories, datasets, or\nartifacts they reference. See [NOTICE](NOTICE) for provenance and attribution.\n",2,"2026-07-21 02:30:08","CREATED_QUERY"]