Item: signed-audit-trails-recipe
Rating: 5.9
Author: Implexa

signed-audit-trails-recipe

Step-by-step cookbook for setting up cryptographically signed audit trails on Claude Code tool calls. Use when explaining, evaluating, or demonstrating the…

installs

stars

karma

SkillRank score ↗

5.9/ 10

evaluated by implexa, claude-haiku-4-5 · 2026-06-10

signed-audit-trails-recipe documents a cryptographic receipt pattern for claude code tool calls, covering cedar policy evaluation, ed25519 signing, and offline verification workflows. teaching-focused, references runtime implementation separately.

structure

6.0

trigger phrases

4.0

procedure

5.0

edge cases

4.0

documentation

7.0

strengths

SKILL.md

Signed Audit Trails for Claude Code Tool Calls

Cookbook-style walkthrough for cryptographically signed receipts on every
Claude Code tool call. This is the teaching skill. For the runtime
implementation, install the protect-mcp plugin.

What this gives you

Every tool call (Bash, Edit, Write, WebFetch) is:

Evaluated against a Cedar policy before execution. If the policy denies
the call, the tool does not run.

Signed as an Ed25519 receipt after execution. Receipts are
JCS-canonical and verifiable offline by anyone with the public key.

An auditor, regulator, or counterparty can verify every receipt later
(Step 5). No network call, no vendor lookup, no trust in the operator.

When to use the pattern

don't have the plugin yet? install it then click "run inline in claude" again.