trust CLI

trust

Sign your files and let anyone verify them with a short public key. No accounts. No services. No infrastructure.

cargo install trust-cli

Quick start

trust stamp ./dist

Hashes every file, signs the list, writes trust-manifest.json.

trust check https://example.com --key ed25519:aB3x9Kf2Q...

Fetches every file, hashes locally, verifies against the developer's signature.

How it works

Fingerprint
Every file gets a SHA-256 hash.

Change one byte and the hash is completely different.
Sign
Your signing key signs the file list.

Ed25519 signature. The key never leaves your machine.
Verify
Anyone checks with your public key.

43 characters. Share it in a README, a bio, or in person.

The Right Person. The Right Role.

Matches that last, by understanding what actually matters about a role, a team, and a person.