OpenAI builds and deploys advanced AI models like GPT-4o for autonomous agents and workflows.
Mantyl
About Mantyl
Mantyl produces a verified project passport that documents how an AI agent built a piece of software. It compiles repository contents, agent decision logs, and executed checks into a single handover document that recipients can independently re-run. The passport records architecture, setup steps, key decisions, risks, and verification results, with every claim linked to evidence. It is generated locally via CLI and can be published as a hosted report with a shareable link. The tool supports multiple AI coding agents and integrates into CI pipelines to regenerate passports on every push. Passports are signed attestations that serve as independent verification between builders and recipients.
Key features
- Compiles repository and agent history into a project passport
- Executes verification checks in clean Docker sandboxes
- Generates HTML and Markdown reports locally
- Supports CI workflow integration via GitHub Action
- Provides CLI commands for scanning, verifying, and receiving passports
- Records agent decisions, risks, and unknowns with dates
- Publishes hosted passports with shareable links
- Supports DSSE attestations via Sigstore for signed verification
Use cases
- Documenting AI-built software for client handover
- Verifying AI-generated code before deployment
- Maintaining provenance records for audits or compliance
Pros
- Local-first execution with no telemetry or account required
- Open passport.json format that remains usable outside the platform
- Supports multiple AI coding agents (Claude Code, Cursor, Codex)
- CI integration for continuous passport regeneration
- Signed attestations for public verifiability
Cons
- Requires Node 20+, git, and Docker Desktop for full verification
- Hosted passports free only during alpha period
- Mantyl Verified credits required for client-facing proof
- No free tier for hosted verification services
Frequently asked questions about Mantyl
What does Mantyl do?
Mantyl generates a verified project passport that documents how an AI agent built a piece of software, compiling repository contents, agent decision logs, and executed checks into a single handover document. The passport records architecture, setup steps, key decisions, risks, and verification results, with every claim linked to evidence.
Who is Mantyl designed for?
Mantyl is designed for AI-first builders who need to provide verifiable proof of how their AI agents constructed software, ensuring recipients can independently re-run and verify the handover. It suits teams or individuals delivering AI-built projects to clients or collaborators.
How does Mantyl generate a passport?
Mantyl generates passports locally via a CLI tool, compiling repository data, agent history, and executed checks into a signed attestation. The process includes indexing the repository, ingesting agent decisions, running verification checks, and producing a digestible report.
Can Mantyl integrate with CI pipelines?
Yes, Mantyl integrates into CI pipelines through a GitHub Action that regenerates passports on every push, ensuring the evidence accumulates throughout the project's lifecycle.
Is Mantyl open source?
Yes, Mantyl is open source, and its CLI tool can be installed globally via npm. The project also provides a free hosted report option for sharing passports.
How are passports verified and signed?
Passports are signed as attestations using Sigstore, either keyed or keyless, following the same format as GitHub's own attestations. This ensures the passport is independently verifiable and tamper-evident.