Verifiable evidence for software delivery
Alien6 released the first version of Continuum Attest, identified by the v0.1.0 tag dated September 18, 2026. Available under Apache-2.0, this Rust command-line tool records structured evidence of software pipeline operations.
A CI log describes activity within a particular environment. Attest adds a receipt containing executed steps and hashes of tracked materials, with a cryptographic signature when signing is enabled. Recipients can examine this evidence and check hashes without relying on the CI provider’s interface.
Adoption within existing pipelines
Attest can run a pipeline from a configuration file or wrap an existing command. Wrapping lets a team start with an individual build step without rewriting its delivery workflow.
Version 0.1 includes receipts, signing and verification, a local trust store and a causal event ledger. It also supports capsules tied to OCI image digests and interoperability with in-toto and SLSA Provenance formats.
Evidence shared across engineering teams
The project is intended for engineering, platform and security teams that need to document the origin of delivered artifacts. Receipts and verifiable archives can provide technical evidence for delivery reviews and provenance checks.
Verification concerns the consistency of recorded evidence and trust in signing keys. It does not by itself establish software quality, regulatory compliance or the signer’s legal identity. Version 0.1 does not publish causal ledger roots to a public transparency log.
Availability and contribution
Continuum Attest is available for Linux and macOS on x86-64 and arm64. The Rust package is named continuum-attest and installs the attest command. Its public repository contains source code, tests, CI templates and contribution instructions.
The documentation explains the receipt format and verification rules. Publishing these materials lets users inspect how the tool works and contribute to its development. This announcement describes the capabilities of the 0.1 milestone.
Project resources
About Alien6
Alien6 is a consulting and software engineering studio working on architecture, intelligent systems, security and applied research. Its open-source projects make tools from that work publicly available.
Press contact