io.github.MadeByFYI/madeby
Disclose AI authorship of code per the ACO standard — tools for AI coding agents.
التثبيت
أضف هذا إلى إعدادات MCP في عميلك (Claude Desktop: claude_desktop_config.json، وCursor: .cursor/mcp.json، ويستخدم VS Code وغيره الصيغة نفسها «mcpServers»).
madebyclaude mcp add madeby -- npx -y madeby@0.3.12 mcp
{
"mcpServers": {
"madeby": {
"command": "npx",
"args": [
"-y",
"madeby@0.3.12",
"mcp"
]
}
}
}
التوثيق
مأخوذ من ملف README للمشروع على GitHub ويُحدَّث أسبوعيًا. تفتح الروابط على GitHub.
المحتويات
MadeBy
Who made this thing? — a verifiable content-provenance layer, starting with code.
This is the v2 build. The design lives in the spec docs at the repo root:
ARCHITECTURE.md— asker-pull spine, hash-as-join-key, attestation standard, invariantsTESTING.md— the trust/QA doctrine (publishable conformance; verify without open source)
The first attempt is archived under archive/v1/ — reference only.
The CLI — madeby
The product ships as a zero-infra CLI that runs against your local git history. Disclosure, not detection: it reports what contributors put on the record and never guesses whether code is AI.
npx madeby coverage # the scoreboard: how much of your repo's authorship is disclosed
npx madeby init # drop the ACO AGENTS.md convention + a CI disclosure check into your repo
npx madeby check # the gate: do commits meet .madeby/policy.json? (advisory by default)
npx madeby who # made by whom? what's on the record for a file or the whole repo
npx madeby ai # an AI agent discloses it authored HEAD (Authored-by-ai:)
npx madeby me # affirm you authored HEAD yourself (--with-ai [tool] for assisted)
madeby coverage is the maintainer's scoreboard — known (disclosed) vs unknown authorship, the
human/with_ai/ai mix of the known, and the asserted-vs-verified trust split, as a labeled estimate.
Built on ACO, the open Authorship Certificate of Origin standard. Full docs:
packages/cli · on npm: madeby.
Repo layout
apps/web/ Next.js web app (Vercel)
packages/core/ Shared deterministic trust logic — canonicalization,
fingerprinting, tier resolution + conformance vectors.
This is the publishable / open boundary (TESTING.md §4).
workers/badge/ Cloudflare Worker — live-served badge SVGs (stub)
services/ingestion/ Python (Modal) — public-git ingestion + compute (stub)
Develop
pnpm install
pnpm dev # runs apps/web at http://localhost:3000
pnpm typecheck # tsc across packages
pnpm build # build all packages
pnpm test # trust-gate suite (conformance vectors land in #17)
Requires Node ≥ 22 and pnpm 10.
Provisioning (handoff)
The skeleton builds with no external services. To run against real infrastructure, copy
.env.example → .env and fill in the values listed there.
Provenance (we dogfood)
This repo records its own provenance from commit zero — signed commits, Co-Authored-By: trailers,
and a .madeby/ span manifest. See PROVENANCE.md; verify with
pnpm provenance:verify-trailers.
Tickets
Work is tracked as GitHub issues, organized under epics (#1 dogfood, #4 foundations, #5 read-side, #6 producer-push, #16 trust-QA).
الأسئلة الشائعة
ما هو io.github.MadeByFYI/madeby؟
Disclose AI authorship of code per the ACO standard — tools for AI coding agents.
كيف أثبّت io.github.MadeByFYI/madeby؟
يعمل على جهازك. في Claude Code: claude mcp add madeby -- npx -y madeby@0.3.12 mcp. وفي العملاء الآخرين، الصق إعداد JSON من هذه الصفحة في إعدادات MCP الخاصة بهم.
هل يحتاج io.github.MadeByFYI/madeby إلى مفتاح API؟
لا يذكر إدراجه في السجل أي مفتاح أو سر إلزامي. قد تتطلب بعض الميزات حسابًا لدى الخدمة التي يتصل بها.
هل io.github.MadeByFYI/madeby مفتوح المصدر؟
شيفرته علنية على GitHub، لكن المستودع لا يعلن ترخيصًا قياسيًا.
من يصون io.github.MadeByFYI/madeby؟
ينشره MadeByFYI. يدرجه AI.tn لكنه لا يصونه ولا يوصي به.
من سجل MCP الرسمي. الإدراج ليس توصية: راجع شيفرة الخادم وصلاحياته قبل منحه الوصول إلى بياناتك.