🔷 Open Development Project: The implementation is a preview release for community feedback.
This project encapsulates the javascript APIs of the incredible Gordian Stack by Blockchain Commons for use in t44. Blockchain Commons low-level libraries are wrapped into capsules and combined into new higher order capsules. Standalone use is also possible.
- GordianOpenIntegrity
- Review terminology and choices with Blockchain Commons.
- Validate or Verify
- Audit logic to ensure all integrity requirements are met and validations make sense.
- JSON Schemas for Gordian Envelope and Provenance Mark properties in
.o/GordianOpenIntegrity.yaml. Blockchain Commons should define schema on URL so we can link. - Review
.o/GordianOpenIntegrity.yamlGordian Envelope predicate/subject/object structure with Blockchain Commons to ensure compliance. - Minimal audit script hand coded by third party to validate integrity.
- Third party review of
GordianOpenIntegrityother than Blockchain Commons. - Declare
GordianOpenIntegrityfoundation as stable once Blockchain Commons agrees.
- Review terminology and choices with Blockchain Commons.
A utility to author a verifiable chain of xid documents.
Combines the xid and provenance-mark capsules to provide a verifiable ledger according to the Revisions with Provenance Marks approach.
Compatible with provenance-mark-cli storage format.
A utility to establish an identifier for a git repository in the form of a did:repo:<hash> id.
Documentation: See the Stream44 Studio Workshop for complete pattern and tool documentation:
A utility to validate the integrity of a git repository across four progressive layers: commit origin, repository identifier, Gordian Open Integrity provenance, and XID document governance.
Documentation: See the Stream44 Studio Workshop for complete pattern and tool documentation:
A utility to record decisions about a git repository, in the git repository, in a cryptographically rigerous way leveraging XID Documents. The logical space is initialized by creating a trust root XID Document tied to the GitRepositoryIdentifier ensuring that author details including signing key match.
Documentation: See the Stream44 Studio Workshop for complete pattern and tool documentation:
# Initialize a trust root for a git repository (ed25519 keys required)
bunx @stream44.studio/t44-blockchaincommons.com init [GordianOpenIntegrity] --first-trust-key ~/.ssh/trust_root_key --provenance-key ~/.ssh/provenance_key
# Validate a git repository
bunx @stream44.studio/t44-blockchaincommons.com validate [GordianOpenIntegrity]
Github Actions validation workflow: .github/workflows/gordian-open-integrity.yaml
name: Gordian Open Integrity
on: [push, pull_request]
jobs:
gordian-open-integrity:
name: Gordian Open Integrity
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
with:
fetch-depth: 0
- uses: Stream44/t44-blockchaincommons.com@main
The trust root commit is tied to a XID Document stored in git at .o/GordianOpenIntegrity.yaml with the provenance mark generator file kept at .git/o/GordianOpenIntegrity-generator.yaml. From there, the Gordian Envelope system is used to introduce new decision assets that may be stored at .o/<domain.tld>/my/path/doc.yaml and .git/o/<domain.tld>/my/path/doc-generator.yaml. Implementers can design their own URI layouts and Gordian Envelope Spaces.
The capsule uses a XidDocumentLedger per document (across commits) and provides a minimal abstraction for provenance-mark enforced ledgers of XID Documents in git repositories tied cryptographically to a WP-2026-01-GitRepository-Identifier commit. lifehash is used to store the inception and current provenance mark at .o/GordianOpenIntegrity-InceptionLifehash.svg and .o/GordianOpenIntegrity-CurrentLifehash.svg respectively. See Provenance footer below for the lifehash marks for this repository.
Given the latest provenance mark via a publishing channel, users are able to verify the integrity of all decisions recorded against the repository with complete confidence. This verification includes the repository code thus allowing for distribution via public peer-to-peer networks. This is stable foundation for transparent distributed governance and the exploration of cryptographic decision making and relationship building.
.o/GordianOpenIntegrity.yaml example from examples/03-GordianOpenIntegrity/main.test.ts:
$schema: "https://json-schema.org/draft/2020-12/schema"
$defs:
envelope:
$ref: "https://datatracker.ietf.org/doc/draft-mcnally-envelope/"
mark:
$ref: "https://github.com/BlockchainCommons/Research/blob/master/papers/bcr-2025-001-provenance-mark.md"
envelope: "ur:envelope/lptpsota ... lbenmhhf"
mark: "1097246a"
---
# Repository DID: did:repo:47c1a6772338d3cf589fb985a51b747b3a9d09cf
# Current Mark: 1097246a (🅑 BLUE MISS DARK ITEM)
# Inception Mark: 03dc39ac (🅑 APEX UNDO EYES PLUS)
# XID(9e560ab4) [
# "GordianOpenIntegrity.SigningKey": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBQfr21iYSvICyxXhXKdq/MEU0sC2mMErqaMfSDans6F test_ed25519"
# 'key': Bytes(78) [
# 'allow': 'All'
# ]
# 'provenance': Bytes(115)
# "GordianOpenIntegrity.RepositoryIdentifier": "did:repo:47c1a6772338d3cf589fb985a51b747b3a9d09cf"
# ]
# Trust established using https://github.com/Stream44/t44-BlockchainCommons.com
Commits that lead to this document:
% git log
commit 8e1a7fb5be0e14e2411ef97afb4e4f0cc6de1e9d (HEAD -> main)
Author: Christoph Dorn <christoph@christophdorn.com>
Date: Mon Feb 16 21:53:53 2026 -0500
[GordianOpenIntegrity] Establish inception Gordian Envelope at: .o/GordianOpenIntegrity.yaml
Trust established using https://github.com/Stream44/t44-BlockchainCommons.com
Signed-off-by: Christoph Dorn <christoph@christophdorn.com>
commit 27702749d720f2d6fb5f90635c19771e2936cbb7
Author: Christoph Dorn <christoph@christophdorn.com>
Date: Mon Feb 16 21:53:53 2026 -0500
[RepositoryIdentifier] Track 47c1a677
Signed-off-by: Christoph Dorn <christoph@christophdorn.com>
commit 47c1a6772338d3cf589fb985a51b747b3a9d09cf
Author: Christoph Dorn <christoph@christophdorn.com>
Date: Tue Feb 17 02:53:53 2026 +0000
[RepositoryIdentifier] Establish signed repository identifier.
Signed-off-by: Christoph Dorn <christoph@christophdorn.com>
These capsules wrap Blockchain Commons Gordian Stack javascript libraries with some additional functionality.
A utility for common filesystem needs.
A utility that abstracts away the git CLI tool for convenient access from JavaScript.
A utility to work with ed25519 keys.
An eXtensible IDentifier (XID) is a stable decentralized identifier generated from the hash of an inception key. XIDs resolve to an envelope-based controller document for managing keys, credentials, and other assertions, and leverage provenance chains for key rotation and revocation without changing the identifier. It does not necessarily to the DID spec, but it is inspired by the same needs and desires.
- Introduction: https://www.blockchaincommons.com/musings/XIDs-True-SSI/
- Project Home: https://developer.blockchaincommons.com/xid/
- Research Paper: https://github.com/BlockchainCommons/Research/blob/master/papers/bcr-2024-010-xid.md
A Provenance Mark is a forward-commitment hash chain to establish cryptographic sequential ordering for linked digital objects. Each mark in the chain commits to preceding and subsequent content, preventing retroactive insertion or modification without requiring timestamps or trusted witnesses. This enables tracking of editions, state changes, and histories for controller documents, credentials, and evolving structures.
- Project Home: https://developer.blockchaincommons.com/provemark/
- Research Paper: https://github.com/BlockchainCommons/Research/blob/master/papers/bcr-2025-001-provenance-mark.md
A command line tool for creating and managing Provenance Mark chains.
- JavaScipt Implementation: https://github.com/leonardocustodio/bcts/tree/main/tools/provenance-mark-cli
- Research Paper: https://github.com/BlockchainCommons/Research/blob/master/papers/bcr-2025-001-provenance-mark.md
Open Integrity is an initiative by Blockchain Commons to integrate cryptographic trust mechanisms into Git repositories. By leveraging Git's native SSH signing capabilities and structured verification processes, we ensure transparency, provenance, and immutability for software projects.
- Project Home: https://github.com/OpenIntegrityProject/core
LifeHash is a method of hash visualization based on Conway’s Game of Life that creates beautiful icons that are deterministic, yet distinct and unique given the input data. It is part of the OIB.
- Introduction: https://developer.blockchaincommons.com/oib/
- Project Home: https://developer.blockchaincommons.com/lifehash/
The following projects use GordianOpenIntegrity:
- t44 - A web3 + AI ready workspace
- Stream44.Studio - A full-stack IDE for building embodied distributed systems
Repository DID: did:repo:9a51a76c33ef3fc7170e5c4efdd5f13a0ba4c59f
| Inception Mark |  |
Current Mark |  |
Trust established using Stream44/t44-BlockchainCommons.com |
(c) 2026 Christoph.diy • Code: MIT • Text: CC-BY • Created with Stream44.Studio
- @ChristopherA, @WolfMcNally and @shannona of Blockchain Commons for all original work on the The Gordian Stack.
- Leonardo Custodio for porting The Gordian Stack Rust implementations to TypeScript.