CodeInstances Signs Runs, So You Can Check Who Kept One and That Nothing Changed

Sun, 18 Oct 2026 00:00:00 +0000

CodeInstances v0.7.0 adds signing. Every instance already carried an id, the SHA-256 of its contents, so verify could tell you a file had been edited. What it couldn’t tell you is who made the file in the first place. Anyone can change a run and write a fresh id. Now a run can carry a signature, and verify -trust checks it against keys you’ve decided to trust.

That matters when a run is evidence. A CI job says the tests passed, an AI agent says what it did and what came back, a bug report says this is what happened. With a signed instance the person reading it doesn’t have to take the file’s word for it. They check the key.

Signing on CodeInstances.com

CodeInstances Signs Runs, So You Can Check Who Kept One and That Nothing Changed