CLI install and smoke test
Available · Runs locallyInstall the Ledgerful CLI from a release binary or source, then run your first scan to confirm it works.
Documentation
Install and operate Ledgerful.
These docs cover the local product surface and explicitly mark hosted or planned capabilities so you can tell what ships today.
Documentation index
Organized by what you need to do. Planned capabilities are state-labeled so you can tell what ships today.
Get started
Install the CLI, run the golden-path proof, and launch the local dashboard.
Golden path (prove it yourself)
Available · Runs locallySelf-guided magic moment: demo --keep → cryptographic VALID (signatures + chain + against-export) → openable DEMO evidence zip. CLI-only; not a compliance verdict.
Local dashboard launch
Available · Runs locallyDashboard access is loopback daemon-backed: a one-time launch token is stripped from the URL, held in memory, and sent as Authorization: Bearer.
Integrate
Connect AI assistants, CI, and team sync to the local engine.
MCP setup
Available · Runs locally@ledgerful/mcp-server is published on the public npm registry at version 0.1.23 (engine pin v0.2.14). The GitHub release MCP tarball (ledgerful-mcp-server-0.1.23.tgz) matches the npm package version. npx and npm install instructions are actionable.
GitHub Action setup
Available · Runs locallyPublic repo Ryan-AI-Studios/ledgerful-action ships action.yml at the repository root (name: Ledgerful PR Risk Report). Install with uses: Ryan-AI-Studios/ledgerful-action@<sha> and pin ledgerful-version (and preferably ledgerful-checksum). Not listed on the GitHub Marketplace. Not the planned hosted GitHub App.
Local team sync
Beta · Runs locallyTeam sync foundation uses signed/encrypted local-first bundles and dir:// transport.
Policy check (CI gates)
Available · Runs locallyledgerful policy check evaluates declared named rules against PR/diff/ledger state and exits nonzero on violation. Offline; base-branch policy is bypass-proof in CI.
Evidence & security
Export audit evidence, verify releases, review the public ledger, and review local data handling.
SOC 2-style evidence export
Available · Runs locallyLocal daemon can generate a ZIP with signed manifest, ledger CSV, verification history, and ADRs.
Security architecture
Available · Runs locallyDeep local-first security model: data boundary, token auth, signing and keys, release verification, telemetry schema, threat model, and responsible disclosure.
Release verification
Available · Runs locallyVerify the v0.2.14 release binary with its SHA-256 checksum and run the local health report.
Public ledger
Available · Runs locallyLedgerful's own development ledger, published as a redacted, signed, browser-verifiable bundle at /ledger.
v0.2.14 with SHA-256 checksums, SBOM, and cosign signing. Surfaces marked planned below are not installable today (for example a future hosted GitHub App). The public self-hosted GitHub Action is available — see Integrate.
SOC 2 control-evidence mapping
Planned · Runs locallyA draft mapping of Ledgerful's framework-agnostic evidence to named SOC 2 controls. Draft — pending design-partner validation; the page is noindex until auditor interviews validate the map.