gitchain

Software provenance & lineage protocol on Solana. Fingerprint your code, register it on-chain with stake-backed provenance, detect AI rewrites, and resolve disputes deterministically.

Install

npm install -g gitchain-sol

Prerequisites

1. Node.js 18+
2. Solana CLI (for wallet management):

   sh -c "$(curl -sSfL https://release.anza.xyz/stable/install)"

3. Create a wallet (one-time):

   solana-keygen new
   solana config set --url devnet

4. Fund your wallet (devnet):

   solana airdrop 2 --url devnet

   If airdrop fails (rate-limited), use https://faucet.solana.com

Quick Start

cd your-project
gitchain init                          # initialize tracking
gitchain publish origin main           # fingerprint + register + push
gitchain status                        # check on-chain state

Commands

Publish (register + push)

gitchain publish origin main --stake 0.2

1. Fingerprints all source files (SHA-256 Merkle tree + AST structural hashes)
2. Scans on-chain registry for lineage/overlap
3. Registers on Solana with SOL stake (default: 0.1 SOL)
4. Uploads file hashes + structural hashes on-chain
5. git push to your remote

Verify (check any code against on-chain records)

gitchain verify ./suspect-code
gitchain verify ./suspect-code --json     # machine-readable output
gitchain verify ./suspect-code --verbose  # show all function matches

Compares a local directory against all registered projects. Reports:

• Content overlap %
• Structural overlap % (AST-level, catches AI rewrites)
• Signature/skeleton overlap
• AI rewrite score (0-100)
• Composite verdict with confidence

Clone (with provenance check)

gitchain clone https://github.com/user/repo.git

Status

gitchain status

Lineage

gitchain lineage          # show ancestry tree + overlap scan
gitchain lineage --json

Challenge (V2 Provenance Court)

gitchain challenge <defendant-pda>

File a dispute against a project you believe copied your code. Compares file hashes on-chain and submits overlap proof.

Resolve

gitchain resolve <dispute-pda>

Resolve an open dispute. Deterministic: >=40% overlap = challenger wins, <40% = defendant wins. Stake transfers to the winner.

Withdraw

gitchain withdraw

Reclaim your stake after verification or 30-day period.

Disputes

gitchain disputes         # disputes for current project
gitchain disputes --all   # all disputes on-chain

How It Works

GitChain creates a multi-layer fingerprint of your source code:

1. File hashes — SHA-256 of each source file (CRLF/LF normalized)
2. Merkle root — Merkle tree of all file hashes
3. Structural hashes — AST-level function fingerprints (catches AI rewrites where every line is different but the structure is the same)
4. Function signatures — name + param count hashing for cross-file rename detection

These are stored in Solana PDAs tied to your wallet and project name. The V2 Provenance Court adds:

• Stake-backed registration — put SOL behind your claim of originality
• On-chain challenges — anyone can dispute with overlap proof
• Deterministic resolution — hash comparison on-chain, no subjective judging
• Stake slashing — plagiarists lose their stake to the challenger

Program

• Network: Solana Devnet
• Program ID: 5bHSYFLoEtoxQnqi6vuDvjFGbcuwnLJbi6wJbHmHW8R4
• Explorer: https://explorer.solana.com/address/5bHSYFLoEtoxQnqi6vuDvjFGbcuwnLJbi6wJbHmHW8R4?cluster=devnet

License

MIT