Open Source

Reliability and Verifiability Through Transparency

We share essential tools for building compliance-grade infrastructure. Use, verify, and contribute to the code that makes Spine verifiable, transparent, and interoperable.

Explore on GitHub View Components

Why Open Source?

For compliance-grade software, transparency is not optional—it's essential.

Independent Verification

Verify for yourself that our tools do exactly what they promise. No need to trust—just verify.

Easy Integration

SDK and CLI ready to use in your toolchain. Standard interfaces, clear documentation.

Community & Collaboration

Feedback and contributions that improve reliability and security for everyone.

Quality Standards

Code released with clear licenses and security best practices. Apache 2.0 licensed.

What We Release

Core components for building verifiable audit infrastructure.

Python SDK

spine-sdk-python

v0.2.0

Client library for Spine API integration. Build tamper-evident audit trails with Ed25519 signatures and BLAKE3 hash chains. Works standalone or with Spine server.

WAL with cryptographic signing
Independent local verification
Async/await support (aiohttp)
Circuit breaker for resilience

View on GitHubApache-2.0

Verification CLI

spine-cli

v0.2.0

Independent verification tools for Spine audit trails. Validate hash chains, verify signatures, and export data—without trusting the running system.

Cryptographic chain verification
Ed25519 signature validation
Export to CSV/JSON
Single Rust binary (~3MB)

View on GitHubApache-2.0

spine-cli verify

$ spine-cli verify --wal ./audit_log

SPINE WAL VERIFICATION REPORT
=============================
Status:              VALID
Events verified:     2,341
Signatures verified: 2,341
Chain integrity:     INTACT