From 12e0d1507156587302e4004ee0b1c04a1242f181 Mon Sep 17 00:00:00 2001 From: tombruno-korext Date: Fri, 17 Apr 2026 17:25:25 -0700 Subject: [PATCH] feat: add AI transparency artifacts Generated by the Korext open source pipeline: - npx @korext/ai-attestation init - npx @korext/ai-license generate - npx @korext/supply-check scan --- .ai-attestation.yaml | 40 ++++++++++++++++++++++++++++++++ .supply-chain-attestation.yaml | 38 ++++++++++++++++++++++++++++++ AI-LICENSE | 42 ++++++++++++++++++++++++++++++++++ ai-license-notice.yaml | 35 ++++++++++++++++++++++++++++ 4 files changed, 155 insertions(+) create mode 100644 .ai-attestation.yaml create mode 100644 .supply-chain-attestation.yaml create mode 100644 AI-LICENSE create mode 100644 ai-license-notice.yaml diff --git a/.ai-attestation.yaml b/.ai-attestation.yaml new file mode 100644 index 0000000..6164e15 --- /dev/null +++ b/.ai-attestation.yaml @@ -0,0 +1,40 @@ +# AI Attestation +# https://oss.korext.com/ai-attestation +# +# This file tracks AI generated code in this repository. +# Generated by @korext/ai-attestation + +schema: https://oss.korext.com/ai-attestation/schema +version: "1.0" +repo: + owner: korext + name: commit-carbon + url: https://github.com/korext/commit-carbon +generated: "2026-04-18T00:25:24.132Z" +range: + from: "2026-04-16T17:03:31-07:00" + to: "2026-04-17T17:17:25-07:00" + commits: 7 +ai: + assisted_commits: 0 + percentage: 0 + tools: [] + detection_methods: [] +governance: + engine: null + last_scan: null + result: null + score: null + packs: [] + findings: + critical: 0 + high: 0 + medium: 0 + low: 0 + proof_bundle_url: null + proof_bundle_count: 0 +policy: + ai_code_requires_review: false + minimum_governance_score: null + mandatory_packs: [] + block_unscanned_ai_code: false diff --git a/.supply-chain-attestation.yaml b/.supply-chain-attestation.yaml new file mode 100644 index 0000000..fe0ee6f --- /dev/null +++ b/.supply-chain-attestation.yaml @@ -0,0 +1,38 @@ +schema: https://oss.korext.com/supply-chain/schema +version: '1.0' +project: + name: commit-carbon + path: /Users/tombruno/Downloads/ai-attestation/commit-carbon + manifest: detected + ecosystem: npm +generated: '2026-04-18T00:25:25.054Z' +dependencies: + total: 2 + scanned: 2 + with_attestation: 0 + without_attestation: 2 + coverage_percentage: 0 +ai_composition: + weighted_percentage: 0 + aggregate_assisted_commits: 0 + aggregate_total_commits: 0 +governance_tiers: + attested: 0 + scanned: 0 + ungoverned: 0 + no_attestation: 2 +tools_detected: [] +high_risk_dependencies: [] +dependencies_detail: + - name: argparse + version: 2.0.1 + ecosystem: npm + attestation_source: none + ai_percentage: 0 + governance_tier: NO_ATTESTATION + - name: js-yaml + version: 4.1.1 + ecosystem: npm + attestation_source: none + ai_percentage: 0 + governance_tier: NO_ATTESTATION diff --git a/AI-LICENSE b/AI-LICENSE new file mode 100644 index 0000000..bf95840 --- /dev/null +++ b/AI-LICENSE @@ -0,0 +1,42 @@ +=============================================== +AI LICENSE NOTICE (Version 1.0) +=============================================== + +This software contains code that was +written with assistance from AI tools. +This notice declares the AI provenance +of the code. It does not grant or +restrict any rights. The primary +software license (shown above or +in a separate LICENSE file) governs +all use of this software. + +AI ASSISTED PORTIONS: NONE (0%) +Assisted Commits: 0 +Total Commits: 7 +Percentage: 0% + +AI TOOLS USED: +None declared + +HUMAN REVIEW: +All AI assisted commits in this +repository were reviewed and accepted +by human developers who are the +authors of record. + +GOVERNANCE: +No automated governance scanning has been configured for this repository. + +VERIFY: +The AI provenance data in this notice +can be verified against the +.ai-attestation.yaml file in the repo +root, or online at: +https://oss.korext.com/ai-attestation/report/korext/commit-carbon + +LEARN MORE: +https://oss.korext.com/ai-license +Specification: CC0 1.0 (public domain) + +=============================================== \ No newline at end of file diff --git a/ai-license-notice.yaml b/ai-license-notice.yaml new file mode 100644 index 0000000..dfe01aa --- /dev/null +++ b/ai-license-notice.yaml @@ -0,0 +1,35 @@ +schema: https://oss.korext.com/ai-license/schema +version: '1.0' +repo: + owner: korext + name: commit-carbon + url: https://github.com/korext/commit-carbon +notice_generated: '2026-04-18T00:25:24.592Z' +attestation_source: .ai-attestation.yaml +ai_provenance: + assisted_commits: 0 + total_commits: 7 + percentage: 0 +tools_used: [] +human_review: + reviewed: true + reviewers_of_record: developers +governance: + engine: null + last_scan: null + result: null + score: null + packs: [] + findings: + critical: 0 + high: 0 + medium: 0 + low: 0 + proof_bundle_url: null + proof_bundle_count: 0 +verification: + attestation_file: .ai-attestation.yaml + online_report: https://oss.korext.com/ai-attestation/report/korext/commit-carbon +specification: + url: https://oss.korext.com/ai-license + license: CC0 1.0 Universal