Built in the open.
Verified in one place.

The Anchored Receipts specification — 21 receipt families, 29 claim types.

Signed, Merkle-anchored receipt formats for the events EU law treats as auditable — provenance, consent, retention, lineage, breaches, subject rights, impact assessments, and the agent-era set (action, quality, guard, grounding, trace, redaction). One envelope, one wire form (ar.<noun>.v<N>), a public claim-type registry, and a RAND-Z patent covenant. Spec text is public domain; reference implementations are Apache-2.0.

Append-only hash chain of every published trusted-issuers list.

A public mirror of each signed ar.trusted_issuers.v1 allowlist — the DIDs whose receipts a verifier surfaces as trusted. Consecutive versions link by hash, so anyone can replay the chain from genesis and detect a tampered link. The canonical head lives at verify.dekimu.com/.well-known/dekimu-trusted-issuers.json; verifiers fetch that, not this repo.

A local-first MCP server that gives any agent verifiable action receipts and reproducible GDPR checks.

Three core tools — mint_action_receipt, verify_receipt, gdpr_obligation_check — plus three optional ecosystem tools (only operate_capability goes online, and it is credential-gated and fail-closed). No telemetry. Receipts are tamper-evident and verifiable offline.

$ npx @dekimuhq/dekimu-mcp

Honesty box: receipts are self-signed by your local key — the issuer is you, not a Dekimu trusted issuer. Dekimu Hub is the trusted issuer that anchors receipts to the public verifier.

The robots.txt for agent actions.

Two files — /agents.txt and /.well-known/agent-policy.json — let a surface tell autonomous agents which actions they may attempt, under what conditions, and what verifiable proof results. Deny-by-default, strict and fail-closed. Parser, validator, fetcher, and generator in one zero-dependency package, plus the normative SPEC. dekimu.com publishes its own policy as a live example.

$ npx agents-txt validate <url>

Legal obligations as typed predicates over a verifiable evidence corpus.

An open, regulation-agnostic grammar: a regulation becomes a typed fact schema plus a list of obligations, each pairing a condition (does this apply?) with a requirement (what evidence satisfies it?). Reconciling a manifest against a workspace produces a deterministic report and a reproducible, signed rac.evaluation.v1 receipt anyone can re-run. Ships a GDPR reference profile, an OSCAL crossmap, and executable conformance vectors.

File-based memory for Claude Code that decays.

Each memory carries a human-set confidence band; a per-type Weibull curve decays it over time since last confirmation, and stale facts surface themselves for review instead of rotting silently. Nothing is ever auto-deleted. A few hundred lines of zero-dependency Node, a drop-in skill, and a SessionStart hook — no database, no embeddings, no background process.

$ git clone https://github.com/dekimuhq/claude-memory && cd claude-memory && ./install.sh

Installs from git — the package is not on npm.

Self-host Commander on Ubuntu 24.04 with one audited script.

A single-shot installer for commander-worker: verifies the host, installs Node 22, creates a dedicated nologin system user, fetches a pinned worker tarball and checks its sha256, drops an env skeleton with no secrets baked in, and installs a systemd unit it does not start. Idempotent — running it twice is a no-op.

$ curl -fsSL https://raw.githubusercontent.com/dekimuhq/commander-installer/main/install.sh | sudo sh

Audit before piping to sh — it runs as root on your box. Read every line of install.sh first.