v0.2.0 — Cryptographic trust loop complete

One implementation. All editors delegate to it.

The authoritative .NET CLI and library for package verification, approval, and signing. Extensions render results — they don't implement logic.

See CLI commands Read the Handbook

Install

dotnet tool install -g CodeTeam

Verify

codeteam verify <package-path> --json

Sign

codeteam sign <package-path> --key <key-id> --json

Features

Built for correctness, not convenience.

Cryptographic Trust

Ed25519 signature verification and SHA-256 digest computation via NSec.Cryptography. Signatures mean something here.

Schema-Locked Contracts

JSON schemas are frozen and CI-protected. Additive changes only. Interop smoke tests fail the build on any breaking change.

Quorum Policy

Approval thresholds are enforced by the library — not by convention. Insufficient approvals fail with FAIL_THRESHOLD, not a silent pass.

NuGet Packages

Each layer has a single responsibility.

Package

Responsibility

CodeTeam

.NET global tool — install with dotnet tool install -g CodeTeam

CodeTeam.Core

Domain models, verification logic, canonical JSON, quorum-based policy evaluation

CodeTeam.Crypto

Ed25519 signature verification and SHA-256 digest computation

CodeTeam.Packaging

Package reading and verification with path-traversal protection and JSON schema validation

Exit Codes

Machine-readable, contract-stable, CI-friendly.

Code

Status

Meaning

OK_VERIFIED

Package verified with valid signature

OK_UNSIGNED

Package valid but unsigned

FAIL_INTEGRITY

Missing file, size/digest mismatch

FAIL_SCHEMA

Schema validation failed

FAIL_SIGNATURE

Signature verification failed

FAIL_THRESHOLD

Approval threshold not met

FAIL_UNAUTHORIZED

Actor not authorized

CLI Usage

Install & verify

# Install the global tool
dotnet tool install -g CodeTeam

# Verify a package (structured JSON output)
codeteam verify  --json

# Approve a package
codeteam approve  --key  --json

Sign & build

# Sign a package
codeteam sign  --key  --json

# Build and test the suite locally
dotnet build
dotnet test