Signed Audit Trails for Claude Code Tool Calls
Cookbook-style walkthrough for cryptographically signed receipts on every Claude Code tool call. This is the teaching skill. For the runtime implementation, install the [protect-mcp](../../protect-mcp/) plugin.
What this gives you
Every tool call (Bash, Edit, Write, WebFetch) is:
- Evaluated against a Cedar policy before execution. If the policy denies
the call, the tool does not run.
- Signed as an Ed25519 receipt af
[Description truncada. Veja o README completo no GitHub.]