Snapshot
SHA-256 and SHA-512 for regular files of any format, with explicit exclusions and bounded streaming.
Offline by design / v0.4.1
SecOps Codemark
Know your files. Trust the reference.
Streaming file integrity, mandatory hybrid signatures and explicit encrypted exports. Local tools with evidence you can inspect.
Files → ReferenceQualified with scope
$ python3 codemark.pyz snapshot ./project
$ python3 codemark.pyz snapshot ./project --apply
$ python3 codemark.pyz doctor --jsonRelease0.4.1
RuntimePython 3.10+
LicenseGPL-3.0-or-later
Network requiredNone
Choose the evidence you need.
Hash regular files without changing them. Authenticate a reviewed reference. Encrypt a private export for its intended recipient.
Authenticate
Both ML-DSA-87 and Ed25519 signatures, independently pinned keys, and linked local history.
Export privately
Explicit Zupt ML-KEM-768 + X25519 recipient encryption. Public source releases stay unencrypted.
Evidence and use
Evidence before conclusions.
Inspect release checks, reproduce the examples and read comparisons within their stated scope.
Trust and limits
Clear trust. Explicit boundaries.
Signatures authenticate; they do not hide content or prove a trusted date. Detecting an older valid history requires an independent expected checkpoint. Encryption is an explicit private-export step.