trust-ledger-os
Trust Ledger OS
Trust Ledger OS is a trust and risk control plane for AI teams. Every high-impact change is reviewed, traced, and recorded before it reaches customers or cash.
Overview
The repo combines a public landing page with four scaffolded implementation phases. The same roadmap is mirrored into reusable package boundaries so the app, docs, and future library work stay aligned.
Mirrors:
icohangar-ops/trust-ledger-osCubiczan/trust-ledger-os
Core Roles
PRISM: runtime observability for agent calls, approvals, and latency.
Prelint: pre-merge product review for policy drift, bad defaults, and risky logic.
GIDE: secure offline editing and emergency fixes when the network is not trusted.
What It Does
Capture a code change, spend request, or agent action.
Review it against product policy and trust rules.
Attach a PRISM trace to the runtime decision.
Produce an approve, deny, or counter outcome.
Store the decision in a ledger future runs can reuse.
Live Routes
/landing page and roadmap/foundationphase 1 scaffold/framework-benchmarkphase 2 scaffold/research-reasoningphase 3 scaffold/production-controlsphase 4 scaffold
Phase Packages
foundation-kit/: shared agent glossary, decision tree, model/tool matrix, and prompt skeletons.framework-benchmark-suite/: framework profiles, comparison cases, and scoring rubric.research-reasoning-kit/: research pipeline stages and reusable reasoning patterns.production-controls-kit/: eval harness, drift monitoring, guardrails, and release gate scaffold.
Distribution Surfaces
packages/npm/: npm-friendly manifest and catalog export, published as@cubiczan/trust-ledger-os@0.1.2.packages/python/: PyPI-friendly manifest and catalog export, published astrust-ledger-os==0.1.2.packages/mcp/: MCP-ready tool and resource catalog, published astrust-ledger-os-mcp@0.1.2. Stdio for the Glama server listing; Streamable HTTP on a dedicated Vercel project (trust-ledger-os-mcp, Root Directorypackages/mcp).
Package Commands
npm package build:
npm --prefix packages/npm run buildMCP package build:
npm --prefix packages/mcp run buildMCP stdio server:
npm --prefix packages/mcp startMCP HTTP server:
npm --prefix packages/mcp run httpMCP HTTP smoke:
npm --prefix packages/mcp run smoke:httpPython CLI:
PYTHONPATH=packages/python/src python3 -m trust_ledger_os.cli --manifestVercel Python entrypoint:
src.trust_ledger_os.vercel_app:appfrompackages/pythonVercel MCP project: Root Directory
packages/mcp(do not reuse the Python app)
Release Workflow
GitHub Actions workflow:
.github/workflows/release.ymlTrigger it with a
v*tag orworkflow_dispatchRequired secrets for publish mode:
NPM_TOKENPYPI_API_TOKEN
The workflow builds the Next app, the npm and MCP packages, and the Python package before publishing.
Demo Assets
The 2-minute video plan and FFmpeg render command are in docs/TRUST_LEDGER_OS_VIDEO.md.
Generated assets live in public/demo:
trust-ledger-os-demo.mp401-hero-desktop.png02-how-it-works.png03-tool-stack.png04-builderbase-fit.png05-demo-deliverables.png06-hero-mobile.png
Implementation Roadmap
Foundation kit: shared agent glossary, model/tool matrix, and when-to-use-an-agent guidance.
Framework benchmark: compare LangGraph, OpenAI Agents SDK, AutoGen, PydanticAI, and LlamaIndex.
Research and reasoning: fundamental analysis, deep search, and reusable reasoning templates.
Production controls: eval harnesses, drift checks, tracing, guardrails, and approval gates.
Getting Started
npm install
npm run devBuild
npm run buildDevelopment Notes
Keep shared data in the package folders, not in the page components.
Import from each package
src/entry until the package exports are formalized.Add new phase work as reusable types and data first, then wire routes and docs.
Treat
README.mdanddocs/TRUST_LEDGER_OS.mdas the roadmap source of truth.
Repo Layout
trust-ledger-os/
├── app/
├── docs/
├── foundation-kit/
├── framework-benchmark-suite/
├── production-controls-kit/
├── research-reasoning-kit/
├── package.json
├── README.md
└── tsconfig.jsonLatest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/Cubiczan/trust-ledger-os'
If you have feedback or need assistance with the MCP directory API, please join our Discord server