Docs // matrixscroll 0.6.0
Documentation for governed agent changes.
They receipt the model call. We receipt everything the machine does. Install the SDK, gate merges in CI, and export evidence — local signing stays free; hosted verify and team ledger run on SSX360.
Documentation
Ed25519
commit envelopes
offline-verifiable proof
local-only
CLI & HOOKS
repo never uploaded
Scroll Gate
PR enforcement
signed vs unsigned
SSX360
control plane
identity · billing · audit
Start here
Documentation paths
Four guides cover authorization, evidence export, CI gating, and honest SLSA mapping — pick the path that matches your rollout stage.
01
Agent Authorization
Offline-verifiable Ed25519 records for commits, MCP tools, and agent runs.
Read guide →02
Evidence Pack
Versioned ssx360.evidence-pack.v1 schema — signed JSON your assessor verifies offline.
Read guide →03
Scroll Gate
Gate unsigned agent merges in CI — GitHub, GitLab, and Forgejo quickstarts.
Read guide →04
SLSA mapping
Honest partial coverage — hosted verify maps to Source/Build L1–2 commit provenance.
Read guide →Sign locally. Verify on the network. Matrix Scroll signs commit envelopes; SSX360 hosts identity, Scroll Gate CI, team audit, and evidence export.
10 lines
First signed commit
Install, hook, commit with an envelope, and gate the merge — copy-paste ready.
pip install "matrixscroll==0.6.0" matrixscroll hook-install matrixscroll scroll commit -m "feat: first governed change" ssx360 check --hosted --base origin/main --head HEAD # Keys stay local · envelope publishes to SSX360 when API key is set
Schema and field glossary: Evidence Pack docs
Layer 2 · SDK
Free local client vs hosted platform
Everything that touches your repo stays on your machine until you choose to publish envelopes to SSX360.
Free — Matrix Scroll
- ✓Ed25519 signing + offline verify on every envelope
- ✓Git hooks, CLI, and MCP
create_envelope - ✓Optional PQC:
matrixscroll[pqc] - ✓Browser verifier at /verify
Hosted — SSX360 (consultation)
- →Team audit ledger + policy registry
- →Hosted Scroll Gate (
POST /api/v1/verify) - →JSON evidence export for procurement review
- →Authorization Pilot on protected branches
Install
CLI setup
Requires Python 3.10+. Confirm hooks with hook-status after install.
pip install "matrixscroll==0.6.0" # Optional post-quantum overlay (software signers only): # pip install "matrixscroll[pqc]==0.6.0" matrixscroll hook-install matrixscroll hook-status
Layer 5 · CI
Scroll Gate v2
Hosted verify maps to SLSA L1–2 for commit provenance. Community tier: 100 hosted verifications per day.
# GitHub Actions — Scroll Gate v2 # Repository secret: SSX360_API_KEY ssx360 check --hosted --base origin/main --head HEAD
Spec: SCROLL_GATE_V2.md · GitHub Actions quickstart · GitLab CI · Forgejo / Gitea · SLSA mapping
Layer 3 · Governance
SSX360 Scroll
Git-compatible wrapper with mandatory envelopes and policy hooks. Not a Git replacement.
matrixscroll scroll commit -m "feat: governed agent change" # Git under the hood — not a Git replacement
Editors
MCP — Cursor, Claude, VS Code
Local provenance verbs stay free. Network tools require a hosted API key after sign-in.
pip install "matrixscroll[mcp]==0.6.0"
{
"mcpServers": {
"matrixscroll-mcp": {
"command": "matrixscroll-mcp",
"args": []
}
}
}Hosted API
API keys & cloud module
Community API keys are provisioned on first sign-in. Authorization Pilot and Team plans are scoped in consultation.
export SSX360_API_KEY=sk_live_... from matrixscroll.cloud import publish, verify_chain, list_envelopes, export_audit publish(envelope_json) verify_chain(base="origin/main", head="HEAD")
Consultation
Ready for production rollout?
Book an Authorization Pilot for protected branches, or schedule 30 minutes to scope evidence-pack delivery for your team.