Signed Audit Trails

Claude Code: /plugin marketplace add wshobson/agents → /plugin install signed-audit-trails@claude-code-workflows

Deliberately not a runtime: this plugin ships one skill file and no hooks, for the stage where you are still deciding whether cryptographic receipts are worth their operational cost. It walks the three invariants that make a receipt mean anything — deterministic JSON canonicalisation, an Ed25519 signature, and a hash chain linking each record to its predecessor — then has you tamper with a receipt on purpose and watch verification fail. Later sections cover what people hit second: an interoperability table across implementations, a GitHub Actions step that verifies the chain in CI, and how receipts compose with SLSA provenance for software an agent helped build. Once the pattern is understood, the sibling protect-mcp plugin supplies the actual hooks.