Module workflows 

Higher-level identity workflows (rotation, provisioning, auditing).

Modules

approval

Approval workflow functions.

artifact

Artifact digest computation and publishing workflow.

audit

Audit workflow for commit signing compliance analysis.

auth

DID-based authentication challenge signing workflow.

ci

CI workflows — batch attestation, OIDC machine identity, and future CI automations. CI workflow orchestration — OIDC machine identity creation from CI platform tokens.

commit_hooks

Commit-time trailer injection (prepare-commit-msg hook + data files). Commit-time trailer injection — the machinery that makes a plain git commit produce a verifiable commit with zero new verbs.

commit_trust

KEL-native commit-trust resolution (successor to the allowed_signers allowlist). KEL-native commit-trust resolution — the single path that decides whether a git commit is authorized by a pinned trusted root.

compliance

Compliance-as-a-query: evidence packs, DSSE org-signing, offline verification. Re-exports from crate::domains::compliance.

diagnostics

Diagnostics workflow — orchestrates system health checks via injected providers.

dsse

Predicate-agnostic DSSE signing/verification for arbitrary in-toto Statements. Generic DSSE signing/verification for arbitrary in-toto Statements.

federation

Re-exports from crate::domains::federation.

git_integration

Git SSH key encoding utilities.

log_submit

SDK workflow for submitting attestations to a transparency log.

multi_sig

Multi-signature event assembly for multi-device KEL events.

namespace

Namespace management workflows: claim, delegate, transfer, and lookup.

org

Re-exports from crate::domains::org::service.

platform

Platform identity claim workflow orchestration.

policy_diff

Semantic policy diff engine.

provision

Declarative provisioning workflow for enterprise node setup.

roots

Trusted-root pinning — the roots allowlist of root did:keri: prefixes a verifier accepts as delegation anchors.

rotation

Re-exports from crate::domains::identity::rotation.

signing

Commit signing workflow with three-tier fallback.

status

Status workflow — aggregates identity, device, and agent state for user-friendly reporting.

transparency

SDK transparency verification workflows.

witness_monitor

rct cross-read equivocation monitor — a SAMPLING tripwire, not a guarantee.