What problem does it solve? It prevents sloppy, unreviewed Git commits by enforcing an exact-candidate workflow: each atomic change is staged deliberately, scanned for credentials and privacy leaks, verified against test gates, and committed only after explicit human approval of an immutable receipt. ## Core Features & Use Cases - Atomic candidate receipts: Records the prepared index as an immutable SHA-256-addressed receipt via commit-candidate, capturing tree, parent, branch, message, and scan state before any commit happens. - Credential and privacy scanning: Screens staged paths, diffs, and blobs for secrets, machine identifiers, and session metadata, requiring manual inspection of any unscanned objects. - Verified commit execution: commit-apply validates the receipt digest, index, identities, and hooks before committing through an isolated index, never amending or resetting on failure. - Receipt lifecycle management: Supports showing, rejecting, and closing out receipts with dry-run previews, local-only completion, and resumable close-out staging. - Use Case: After finishing a feature, ask the agent to prepare a commit; it stages only intended hunks, runs gates, presents a commit card with the conventional-commit message, and commits only after you select approval. ## Quick Start Ask the agent to prepare and commit the current atomic change, then review the presented commit card and select Commit and resume to authorize it.