Download Latest Version Dennis 0.8.9 - The dexscope release source code.zip (236.0 kB)
Email in envelope

Get an email when there's a new version of string-audit

Home / v0.8.5
Name Modified Size InfoDownloads / Week
Parent folder
Dennis -- Deterministic, signed code transformations you can trust and prove. source code.tar.gz 2026-05-14 195.9 kB
0
Dennis -- Deterministic, signed code transformations you can trust and prove. source code.zip 2026-05-14 252.2 kB
0
README.md 2026-05-14 2.3 kB
0
Totals: 3 Items   450.4 kB 0

Dennis v0.8.9 — Trust becomes visible

Dennis is evolving from a system into a product.

This release closes the first real loop: create → sign → inspect → understand

✨ What’s new 📦 Artifact size tracking (end-to-end)

  • Every artifact now records its exact size
  • Storage is tracked per user
  • Size is exposed via API and UI

👉 Artifacts are lightweight, predictable, and transparent

🔍 Inspect: trust is now visible

  • Human-readable inspect output now includes:
  • signature validity
  • trusted vs untrusted keys
  • identity status (canonical vs legacy)
  • JSON output includes full verification metadata

👉 You don’t just see signatures—you understand them

🔐 Strict trust policy (introduced)

  • Artifacts are accepted only if at least one trusted signature exists
  • Trust is explicit, not assumed
  • Legacy signatures are still supported but clearly marked

👉 No magic. No hidden trust. Everything is inspectable.

🧠 Identity consistency (fixed + enforced)

  • Key IDs are now derived consistently from public keys
  • Eliminates ambiguity between signing and verification
  • CLI and artifact metadata now agree on identity

👉 A signature always means the same thing

⚙️ CLI improvements

  • Cleaner signing flow (no hidden defaults)
  • Identity is always explicit
  • Improved inspect output for real-world usability

🧪 What this unlocks

With this release, Dennis artifacts are:

  • deterministic (same input → same result)
  • verifiable (signatures are real and inspectable)
  • traceable (lineage + identity)
  • understandable (human-readable output)

This is the foundation for:

  • team trust
  • reproducible transformations
  • artifact-based workflows

🚧 What’s next

  • Trust propagation into the SaaS (Dennis Forge)
  • Visual diff viewer/editor
  • Trust chains (root → delegated keys)
  • Collaboration workflows

🧠 Philosophy reminder

Dennis is not just a tool.

It’s an attempt to answer a simple question: Can we make code changes that are not only correct… but provable?

🙌 Feedback

If you’ve cloned, tested, or even just read about Dennis—thank you. This project is being built in the open, and your curiosity is part of the process.

Source: README.md, updated 2026-05-14