C2PA for source code

Every AI commit deserves a passport

Pedigree signs every AI-assisted commit with a cryptographic attestation, anchored in a public transparency log. Know who wrote every line -- human or machine -- before the EU AI Act deadline hits.

View on GitHub

Code Passport

Verified

Commit4a21672

Authoribm-bob (AI-assisted)

Modelgranite-3.3-8b

Human share15%

PolicySatisfied

Logged inRekor transparency log

dev.pedigree/ai-authorship/v1

of code committed today is AI-assisted

Sonar, 2025

€0M

maximum fine under EU AI Act Article 50

EU AI Act

< 0s

to verify a commit’s full chain of custody

Pedigree benchmark

From keystroke to transparency log

DeveloperWrites code with AI

BobProvenance Officer mode

pedigree-mcpBuilds the attestation

SigstoreSigns with OIDC identity

RekorPublic transparency log

in-toto-statement.json

{
"predicateType": "dev.pedigree/ai-authorship/v1",
"predicate": {
"authorship": {
"kind": "ai-assisted",
"humanShare": 0.15
},
"agent": {
"tool": "ibm-bob",
"model": "granite-3.3-8b"
},
"policy": { "satisfied": true }
}
}

Read the full spec

Try Pedigree on a real commit

No signup. No install. Just scan.