Skip to content

Standard

Ed25519

Ed25519 is a widely used public-key digital signature algorithm based on elliptic-curve cryptography, valued for speed, small keys, and strong security.

Known aliases

  • High-speed high-security signatures
  • SSH ed25519

Current stories

buildOne report1 publisher

LLM-dependent agents flipped HivePlane's certification verdicts between runs

Debashish Ghosal got HivePlane's agent certification to repeat across three runs by swapping in deterministic agents and a mocked judge. The stable verdict covers the control plane's plumbing, and whether an LLM-driven agent answers correctly is now outside the certificate.

Publishers:dev.to

Reality

Evidence35
Adoption
Not scored
Hype gap+5
Incentives45
Confidence40
buildOne report1 publisher

A skills.lock file puts Agent Skills behind the same digest check as an npm dependency

AgentWarden scans Markdown skills and MCP configs, exits non-zero on a rule match, and records a SHA-256 in skills.lock. It is also the project whose post documents the missing lockfile.

Publishers:dev.to

Reality

Evidence38
Adoption8
Hype gap+10
Incentives70
Confidence45
buildOne report1 publisher

Signed commits and commitlint move the first governance gate onto the developer's laptop

A dev.to walkthrough puts commit signing, commitlint, Gitleaks and OWASP SAST into Husky hooks, then runs commitlint again in GitHub Actions because any developer can skip the local hooks with --no-verify.

Publishers:dev.to

Reality

Evidence50
Adoption
Not scored
Hype gap+12
Incentives25
Confidence55
buildOne report1 publisher

A flag that names the keyring hands the rulebook to the party being gated

Ed25519 tells you which key signed which bytes. A slice log from the Ranex project shows how a policy path read from the working tree let the gated side pick the rules, and what pinning the trust root to the evaluated commit cost.

Publishers:dev.to

Reality

Evidence55
Adoption
Not scored
Hype gap+12
Incentives45
Confidence45
buildOne report1 publisher

Giving one deterministic layer the only write privilege demotes the model to a proposer

An eldercare agent published at a live URL puts its two hard rules in Python instead of prompts, and the demo tests them by calling the send function directly, which is the only version of that claim a reader can check.

Publishers:dev.to

Reality

Evidence32
Adoption8
Hype gap+14
Incentives68
Confidence46
buildOne report1 publisher

Constructing the undo before the write admits 13.8% of write-capable MCP tools

An escrow design moves verification ahead of the write, which turns reversibility into an eligibility test for tools, and the author's own census of public MCP servers says most write-capable ones fail it.

Publishers:dev.to

Reality

Evidence32
Adoption3
Hype gap−18
Incentives45
Confidence35
buildOne report1 publisher

ComputeLedger hashes the signer's public key into the payload to defeat swap-and-re-sign

A signature only binds the bytes it covers, so a receipt carrying its verifying key in the envelope can be re-signed by anybody. The authors say an internal audit forced a dedicated key-swap test before release.

Publishers:dev.to

Reality

Evidence40
Adoption12
Hype gap+22
Incentives82
Confidence45
buildOne report1 publisher

Signed receipts on MCP tool calls: 20 lines buys you evidence, not trust

A dev.to tutorial wraps MCP handlers so every tool call returns an Ed25519-signed receipt. The signature covers the wire. It does not cover the process doing the signing.

Publishers:dev.to

Reality

Evidence28
Adoption7
Hype gap+52
Incentives86
Confidence44
buildOne report1 publisher

Microsoft ships an MIT-licensed agent kernel: policy rings, Ed25519 identity, kill switch

Agent Governance Toolkit puts policy checks in the execution path rather than the prompt. The seam: the kernel is middleware inside the agent's process, so containers still do the isolating.

Publishers:dev.to

Reality

Evidence24
Adoption
Not scored
Hype gap+46
Incentives72
Confidence28
buildOne report1 publisher

France's e-invoicing deadline is really a bill for supplier data nobody verified

Receiving becomes mandatory for VAT-liable French firms on 1 September 2026. The older problem: supplier records carry a SIREN, VAT number and IBAN that nothing has checked against a live authority.

Publishers:dev.to

Reality

Evidence30
Adoption
Not scored
Hype gap+34
Incentives88
Confidence42
buildOne report1 publisher

Your meter now runs on someone else's machine: signed receipts, fsync, and failing open

A dev.to walkthrough of metering embedded Go SDKs starts by assuming the host is hostile: Ed25519-signed snapshots, real fsync discipline, and an enforcement branch the excerpt never reaches.

Publishers:dev.to

Reality

Evidence34
Adoption
Not scored
Hype gap+18
Incentives
Not scored
Confidence38