Back to browse
SEL Deploy – Tamper-evident deployment timeline (Ed25519, hash-chained)

SEL Deploy – Tamper-evident deployment timeline (Ed25519, hash-chained)

by chokriabouzid·Mar 3, 2026·1 point·0 comments

AI Analysis

●●●BangerWizardrySolve My ProblemBig Brain

Ed25519-chained immutable deployment log—instant detection of tampering or reordering.

Strengths
  • Hash-chaining architecture is genuinely clever: modify one byte anywhere, chain breaks—no central authority needed
  • Deterministic engine (33/33 tests pass) means reproducible attestations; MIT licensed, fully local, no SaaS dependency
  • Solves a real post-mortem pain point (deploy timeline verification) that existing tools (Sigstore, in-repo logs) handle poorly
Weaknesses
  • Early-stage CLI with minimal ecosystem integration; unclear if teams will adopt attestations over existing audit logs
  • Asciinema demo is the only live proof; no production deployment data shown
Target Audience

DevOps engineers, SREs, security teams managing deployment auditing

Similar To

Sigstore · in-toto · GitOps/ArgoCD audit logs

Post Description

Every post-mortem starts with: "What exactly deployed before the incident?"

SEL Deploy records every deployment as a cryptographically-signed attestation, chained to the previous one. Modify any record — the chain breaks instantly.

Demo: https://asciinema.org/a/LDZVa0z3OVdLt7Zv

$ sel-deploy run -- kubectl apply -f deploy.yaml Hash: sel:v1.0:sha256:3541d13b... Chained to: sel:v1.0:sha256:1a2b3c4d...

$ sel-deploy verify Chain intact

# (modify one byte manually)

$ sel-deploy verify Hash mismatch — attestation tampered Chain broken

Built on SEL Core (deterministic engine, 33/33 tests). MIT licensed. No SaaS. Fully local.

GitHub: https://github.com/chokriabouzid-star/sel-deploy

Similar Projects

Security●●●Banger

Tamper evident audit logs for LangGraph/CrewAI agents

Cryptographic hash chains make agent action logs legally defensible—LangSmith and Langfuse don't do this.

Big BrainWizardrySolve My Problem
oabolade
104d ago
AI/ML●●Solid

Tamper-evident audit logs for LangChain/Crew AI agents

Cryptographic hash chains make AI agent logs legally defensible when LangSmith can't.

Niche GemBig Brain
oabolade
203d ago
AI/ML●●Solid

Comb – Zero-dependency, hash-chained conversation memory for AI agents

COMB keeps every word—append-only daily JSONL staging rolled into a hash-chained ChainArchive with three-directional links so memories are portable and tamper-evident. It’s a smart, low-friction trade: you get perfect fidelity and easy copying at the cost of storage growth and no built-in semantic search, so expect to plug in a custom search backend for retrieval.

Big BrainNiche Gem
artifactvirtual
204mo ago
Security●●●Banger

Nobulex – Cryptographic receipts for AI agent actions

Proof-of-behavior for AI agents before Anthropic or OpenAI build their own.

Zero to OneBig BrainBold Bet
arian_
102mo ago