Tags: halleylabs/witness

README: measured v0.3 ceiling after journal group commit

anchor: Ed25519ph over SHA-512, required by the live Rekor service

Rekor's hashedrekord verifier rejects pure Ed25519 signatures with a
sha256 digest (400: unsupported hash algorithm). The entry now carries
the sha512 of the commitment and an Ed25519ph signature over the same
prehash. Verified against the production log: entry
108e9186e8c5677a272ab6a6f598f63b7dfc6be258ddcea859531f7bbff78cbfc0d36b45de6da347
(logIndex 2791554212) anchored and independently re-verified.

Merge feat/mcp-proxy: record MCP tool calls into the same journal (La…

…yer 2)

Conflicts: import union in main.rs; README kept both sides (anchor and
standard-export sections from main, MCP section and roadmap from branch).

Fix CAS write race under concurrency; add witness sign, benchmarks, m…

…easured overhead

The CAS used one shared temp path per object, so concurrent writers of
identical content raced: one rename won and the rest failed. Under load
~2% of requests returned 500 (verified: 22/1000 at c=20, now 3000/3000
at c=50). Temp paths are now per-writer, and cache index writes are
atomic and write-once.

Also adds:
- witness sign, emitting Pact headers for curl and load generators
- bench/bench.sh isolating baseline / record / record+sign / cache-hit
- measured overhead in the README (+0.25ms p50, ~37k calls/sec ceiling)
- regression tests for concurrent CAS puts and concurrent proxied calls

release: cross-compile macOS x86_64 from the arm64 runner (macos-13 r…

…unners starve)

witness v0.1.0: provenance-native caching proxy for model APIs

Single-binary sidecar composing the Pact protocol (Ed25519 agent identity,
narrowing-only delegation chains, boundary enforcement) and the AgentReplay
protocol (content-addressed recording, hash-chained journal, deterministic
replay, Merkle commitments + inclusion proofs, audit).