POLICY · 6 of 10

Fake commits fail at the CI gate because they're unsigned.

Previously framed as IDE keystroke surveillance to detect "sessionless" commits. Reframed: configure Git + CI to reject any unsigned commit on protected branches and any PR merge without a fresh Manav receipt. Bots can open PRs. Bots can write code. Bots cannot merge without consensual signed authority - from a human, or from a delegation chain that traces back to one.

Privacy posture for this scene

Zero IDE surveillance. Policy enforcement at the repo.

Git commit signing is a 20-year-old primitive; Manav supplies the custody and verification.
Agent-authored commits land - if the agent carries a delegation receipt chained to a human.
No anonymous code reaches production. There is no third option.

The bad framing - IDE keystroke surveillance

"We monitor every keystroke in the developer's IDE and flag commits that land without an active typing session." Requires installing a telemetry agent on every developer's machine. Generates false positives on copy-paste. Hostile to remote work and to developer trust.

The privacy-preserving framing - repository policy

Configure Git to require commit signing on protected branches. Configure CI to reject any unsigned commit. Configure GitHub/GitLab branch protection to reject any merge without a fresh Manav approval receipt. Manav supplies the signing key custody and verification; Git supplies the signing primitive.

Sample protected-branch policy

branches:
  main:
    require_signed_commits:    true
    accepted_signing_keys:     "manav-managed"
    require_manav_merge_proof: true
    delegation_allowed:        true   // agents can commit if delegated
    delegation_max_chain:      1

Three commit attempts

`git push origin main` (unsigned)

⛔ Rejected - no Manav signature on commit

PR merge by bot (no merge receipt)

⛔ Rejected - protected branch requires Manav merge proof

PR merge by Asha (with Manav approval)

✓ Accepted - receipt mnav_proof_pr_92a8

No anonymous code lands. The developer's IDE is never touched. The repo enforces the rule; Manav supplies the cryptographic proof.

Want to ship this in your own app?

Three lines of JavaScript. Demo key mnav_test_demo works on localhost.

Get the SDK →

← Receipt context Origin attestation →