grcorsair

grcorsair/corsair

Compliance trust shouldn't require emailing PDFs and hoping nobody tampered with them. Corsair signs compliance findings as verifiable digital certificates that anyone can check with a standard JWT library.

2 stars 0 forks 2 watchers TypeScript Apache License 2.0
bun compliance did-web ed25519 grc jwt scitt soc2 typescript verifiable-credentials
View on GitHub Website
1 Open Issue Need Help Last updated: Feb 14, 2026

Open Issues Need Help

View All on GitHub
feat: compliance.txt — compliance proof discovery at /.well-known/ 6 days ago

AI Summary: This GitHub issue proposes the creation of a `compliance.txt` file, to be hosted at `/.well-known/`, serving as a standardized discovery layer for an organization's compliance proofs. Currently, there's no unified way for verifiers to discover what an organization can prove from their domain, leading to inefficient out-of-band coordination. This new file aims to provide a machine-readable way to point to compliance-related evidence, similar to how `security.txt` or `did.json` function.

Complexity: 3/5
enhancement good first issue
grcorsair/corsair
2

Compliance trust shouldn't require emailing PDFs and hoping nobody tampered with them. Corsair signs compliance findings as verifiable digital certificates that anyone can check with a standard JWT library.

TypeScript
#bun#compliance#did-web#ed25519#grc#jwt#scitt#soc2#typescript#verifiable-credentials