Open Standards for AI Code Governance

Open standards for
AI code transparency

Korext Open Source builds free tools and open specifications for the developer community. Every project is published under permissive licenses with public domain specifications.

AI Attestation

Track AI generated code in your repository

An open standard for tracking and governing AI generated code in any repository. Detects Copilot, Cursor, Claude Code, and 16 more tools. 19 AI coding tools total.

19 AI tools detectedGit hook integrationGitHub ActionBadge generator
spec CC0 1.0code Apache 2.0v1.0.4

Quick Start

npx @korext/ai-attestation init
View project

AI License Notice

Declare AI provenance in open source projects

A standardized notice for declaring AI tool usage in any open source project. Attaches to any existing license as an addendum. Five provenance levels from NONE to FULL.

5 provenance levels3 governance tiersCLI generatorLicense agnostic
spec CC0 1.0code Apache 2.0v1.0.3

Quick Start

npx @korext/ai-license generate
View project

Supply Chain Attestation

AI provenance across your dependency tree

Scan your entire dependency tree for AI generated code. Fourteen ecosystems. CycloneDX and SPDX integration. Private registry support for enterprise deployment.

14 ecosystemsSBOM integrationPrivate registryGitHub Action
spec CC0 1.0code Apache 2.0v1.1.1

Quick Start

npx @korext/supply-check scan
View project

AI Incident Registry

Learn from AI code failures across the industry

The public registry and open standard for cataloging AI code failures. Report incidents, browse patterns, and subscribe to feeds. The CVE equivalent for AI authored code.

AICI identifiersDetection rule mappingRSS/Atom feedsAnonymous reporting
spec CC0 1.0code Apache 2.0v1.0.0

Quick Start

npx @korext/incident-report draft
View project

AI Regression Database

Catalog code patterns AI tools continually generate incorrectly

The public corpus of code patterns that AI tools consistently generate incorrectly. Scan your repo, track patterns over time, test reproduction rates automatically.

Automated test harnessVersion awareness trackingAPI detectionGitHub Action
spec CC0 1.0code Apache 2.0v1.0.4

Quick Start

npx @korext/regression-submit draft
View project

AI Code Radar

The real-time pulse of AI code adoption

The live public dashboard showing AI code adoption and market share across open source. Powered by the attestation and supply chain data flowing through the ecosystem.

Public APITime series dataEcosystem trendsEmbeddable charts
spec CC0 1.0code Apache 2.0v1.0.0

Quick Start

npm install @korext/radar-data
View project

Commit Carbon

Measure the carbon footprint of AI assisted commits

The open standard for calculating AI coding emissions at commit granularity. CSRD, SEC, and CDP compatible. Conservative estimates with ranged outputs.

CSRD/SEC/CDP reportsRegional grid intensityRanged estimatesGitHub Action
spec CC0 1.0code Apache 2.0v1.0.2

Quick Start

npx @korext/commit-carbon scan
View project

The gap in open source

Open source licenses were designed when all code was human written. When AI tools assist or generate code, downstream consumers have no way to know what portions are AI assisted, which tools were used, or whether the code was governed. These standards change that.

35%

of production code is now AI generated

11

AI coding tools detected from git patterns

0

existing license standards that address AI authorship

How they work together

Eight open standards. One ecosystem. Complete AI code governance.

1

Track

AI Attestation scans your git history and produces a machine readable YAML report of AI tool usage.

2

Declare

AI License Notice reads the attestation and generates a standardized notice declaring AI provenance.

3

Scan

Supply Chain Attestation aggregates AI provenance across your entire dependency tree. Fourteen ecosystems.

4

Learn

AI Incident Registry documents what happens when AI code fails. Browse incidents, subscribe to feeds.

5

Prevent

AI Regression Database catalogs repeatable patterns AI tools get wrong proactively before incidents.

6

Observe

AI Code Radar aggregates metrics across the ecosystem into a live public pulse of adoption patterns.

7

Account

Commit Carbon measures AI coding emissions at commit level. CSRD, SEC, and CDP compatible disclosure.

8

Govern

Enterprise governance layer. Combine all standards into a unified AI code policy for your organization.

Learn more

Start tracking your AI code

One command. Zero configuration. Works with every language, every framework, every AI coding tool.

npx @korext/ai-attestation init