trust CLI

trust

Sign your files and let anyone verify them with a short public key. No accounts. No services. No infrastructure.

cargo install trust-cli

How it works

Fingerprint
Every file gets a SHA-256 hash.

Change one byte and the hash is completely different.
Sign
Your private key signs the file list.

Ed25519 signature. The key never leaves your machine.
Verify
Anyone checks with your public key.

43 characters. Share it in a README, a bio, or in person.

trust stamp ./dist

Hashes every file, signs the list, writes trust-manifest.json.

trust check https://example.com --key ed25519:aB3x9Kf2Q...

Fetches every file, hashes locally, verifies against the developer's signature.