Co vs Jørnal

Every AI coding agent signs its commits with a forgeable plain-text line.

Yesterday's entry is on the page above, read it whenever; it can't be rewritten.

About Co

Every AI coding agent signs its commits with a forgeable plain-text line. Co-authored-by is a Lie: Cryptographic Provenance for AI Coding Agents . It matters now, because the attribution metadata is starting to be used to make trust decisions, and that turns a cosmetic line into an attack surface. Commit metadata has always been trivial to fake unless signing is enforced. So over a couple of evenings I built the missing half: a producer-attribution layer where attribution is backed by a hardware key, enforced automatically, and verifiable .

About Jørnal

Yesterday's entry is on the page above, read it whenever; it can't be rewritten. A backup that runs without you having to remember. Find what you wrote, even when you can't remember the exact words. Cancel any time; you will never lose what you've written.