QOS TEE operator ceremony CLI — keygen/share/approve/provision + shift-traffic over the coordinator API, and the at-rest sealing tools. Shares are double-sealed everywhere they rest: ML-KEM-1024 over the QOS P-256 envelope. All crypto runs in embedded bin

Open Wallet Messaging core: strict envelopes, kind registry, secure contact exchange, wallet auth, payments and file sealing — pure logic, @noble crypto only

varlock native helper binary for Linux arm64 (TPM2/polkit local encryption). Installed automatically as an optional dependency of varlock.

Model Context Protocol (MCP) server for FractalAI: verify post-quantum (ML-DSA-65 / Dilithium-3 / NIST FIPS 204) signatures and pay for PQC signing, provenance sealing and decision attestation over x402 (HTTP 402 + USDC on Base).

Reserved package name for a future dependency sealing build tool.

Witness sealing substrate for ACP. Real HTTP client (customer-managed custody: prepare→sign→submit) + a no-network fake for tests/demo. Seals hitl_decision / agent_action to witness.getvda.ai.

WebAssembly bindings for dig-keystore's opaque secret sealing (AES-256-GCM + Argon2id) for browser callers (dig_ecosystem #147 Phase A).

Generic microgame engine: frame/adapter/redaction types, registry, seeded random, result sealing, intent vocabulary, public event feed, and a shared conformance suite.

VDA Witness SDK — seal your AI agent's decisions into tamper-evident, Ed25519-signed, independently-verifiable evidence (EU AI Act Art. 12), and verify records OFFLINE against public infrastructure. Fail-open, zero-dependency sealing. Part of the Verified

Authority sealing primitive for canonical authority ledgers, genesis seal publication, and verifier-visible issuance surfaces in the Verifrax stack.

Shared security primitives for the DoomPi web cockpit: sealed channels and signed bundle manifests for independently trusted verifiers.

Layer-1 crypto primitive for the Xema OS credential broker. Seals an opaque credential payload into an audience-bound, short-lived (TTL ≤ 60s) JWE (`dir` + `A256GCM`) bound to a credentialBindingId + inputHash + correlationId, and unseals it with audience

Majik Signature Client is a hybrid post-quantum content signing and verification library for the Majikah ecosystem. Built on top of Majik Key Client, it provides tamper-proof, forgery-resistant digital signatures for any content format — using a dual-algo

Unified CKB developer SDK by Scryve Tools — wallet auth, content sealing, witness encoding, Spore NFTs, payment splitting, xUDT/RGB++ token payments, and Fiber Network channels in one package.

KeyHalve SDK for Node.js — End-Cell blind-rail document sealing & verification: client-side AES-256-GCM, 3-share key split (QR + platform + independent KeyHalve rail), commitment hashing, QR placement. Zero required production dependencies.

The DTCG schemas as files: the published 2025.10 base, verbatim, plus a vocabulary template

OCP — Open Companion Protocol. Core + profile message contracts (Zod), .well-known schema, and conformance test vectors.

react-quill

TypeScript authoring and engine client SDK for Cymule

Seal your published site so a changed page cannot pretend to be yours — plus honeypot traps and honeytokens.