GeezerVison is showing getagentdiff.com — AgentDiff — Line-level provenance for AI-authored code Git-native AI code attribution Know which agent shipped
which line — and gate it.Every pull request gets a per-agent verdict: a Policy gate (provenance, signed traces, protected paths) and a Quality gate (secrets, undeclared deps, duplication) — scoped to the AI-authored slice. No source code leaves your workspace. Example — what a failing PR check looks like (strict policy): • One trace was written without a verifiable ed25519 signature. • Billing code modified without a matching payments-platform approval. *No source code left the repository; only trace metadata is evaluated inside git refs. Interactive ShellStart with the live checkHover and select any block below to audit code attribution. Try clicking "Simulate Code Tampering" to see cryptographic signature guard rails trigger instantly. Tsrc/services/payment.tsrefs/agentdiff/meta trackable 1
import Stripe from "stripe"; Claude Code 2
import { logger } from "../lib/logger"; Claude Code 3
import { UserProfile } from "../types"; Claude Code 5
// Human addition to prevent cold start timers 6
const PLATFORM_FEE_MULTIPLIER = 0.025; 8
export interface CheckoutPayload { 12
export function formatStripeAmount(amount: number): number { Cursor 13
// Format and clamp to stripe minimum unit standards Cursor 14
return Math.round(amount * 100); Cursor 17
export async function buildCheckoutSession(user: UserProfile, amount: number) { Windsurf 18
const stripeAmount = formatStripeAmount(amount); Windsurf 19
// CRITICAL PAYMENT INITIATION ENGINE Windsurf 20
return await getStripeClient().checkout.sessions.create({ Windsurf 21
payment_method_types: ["card"], Windsurf 22
line_items: [{ price_data: { currency: "usd" }, quantity: 1 }], Windsurf 23
metadata: { userId: user.id }, Copilot 24
success_url: `${process.env.APP_URL}/billing/success`, Copilot 25
cancel_url: `${process.env.APP_URL}/billing/cancel`, Copilot Line provenance segments:Claude Code Cursor (GPT) Windsurf Copilot Human-authored UNSIGNED AGENT TRACE This AI trace was generated inside an editor, but lacks digital signature metadata in refs/agentdiff/meta. Agent:Windsurf Model Used:claude-haiku-4-5 Line Range:L17 to L21 Registered Key:N/A — Trace Unsigned Revision:e4f5d6c Timestamp:2026-06-06 10:35:00 UTC Generation Intent Prompt:“Create checkout session payload builder and link user accounts securely.”metadata snippet Signature Proof:ed25519 N/A — unsigned metadata Audit Evaluation: Needs Owner Review One agent trace is unsigned and the PR touches a protected payment route. AgentDiff policies block continuous delivery integration until the trace is signed locally or an administrator approves the override. | Git-Level Integration Three hooks. One ledger.AgentDiff lives directly inside your repository pipeline. No centralized SaaS server, no custom agent IDE, no developer pipeline friction. Installs in 30 seconds. 01 Install once.Run agentdiff configure inside any git repo. Registers local hooks automatically for Claude Code, Cursor, Copilot, Windsurf, and custom environments. 02 Commit normally.Pre-commit matches captured agent edits against your staged diff. Post-commit cryptographically signs the trace with your local ed25519 key and appends it to git history. 03 Audit anywhere.Query the system via terminal commands, export immutable JSON files, or synchronize code logs. No telemetry leaves your network — provenance stays inside your own infrastructure. Integrations UnifiedClaude Code, Cursor, Copilot, Codex, Windsurf, Antigravity, and custom developer bots share one single tracking and attribution database. Immutable HistoryAttributions are stored in dedicated git refs (refs/agentdiff/meta), so provenance travels with the repository across clones, forks, and archives. PricingFree where it should be.Open source teams get the core ledger. Enterprise teams add private repo controls, hosted visibility, SSO, and compliance alerts. Plan Core Ledger (Open Source)Free ForeverEssential cryptographic AI provenance ledger for individuals, public repository developers, and open source communities.
- CLI command suite for any repo
- GitHub App on public repos
- All 7+ core agent integrations
- Self-hosted local dashboard report
- ed25519 signature checks
Suite Enterprise SuiteCustom PlanFull compliance guardrails, centralized directory key synchronization, real-time alert dispatching, and SLA support pipelines.
- Private repositories support
- Hosted dashboard with SSO (SAML/OIDC)
- Slack and email compliance warning logs
- Custom per-repo logic & CSV metrics export
- SLA-backed support & feature priorities
Capabilities Grid Open Source vs Enterprise| Governance Category | Open Source CLI Core | Enterprise Suite |
|---|
| Repository Scope | Any repo — CLI runs fully local (GitHub App: public repos) | Private & public repos, hosted GitHub App | | Cryptographic Check | Raw ed25519 trace audits | Directory-synced signing keys | | Visual Dashboard | Self-hosted local reports | Hosted multi-tenant app with SSO | | Compliance Guard Engine | CLI policy check in CI | ✓ Live PR check-runs + org policy baseline | | Real-time alerts | Not included | ✓ Outbound Slack & Webhook dispatch | | Dedicated Support | GitHub issues & community | ✓ Private SLA channels & roadmaps |
Security FAQQuestions security teams ask.Clear disclosures on code privacy, payload footprint, cryptographic keys, and compliance evidence. |