Track AI generated code in your repository
An open standard for tracking and governing AI generated code in any repository.
npx @korext/ai-attestation initTracks
Detects AI tool usage across your git history. Copilot, Cursor, Claude Code, Aider, and 7 more. Fully automatic via git hook.
Attests
Produces a human readable .ai-attestation.yaml file with tool breakdown, commit counts, and governance status.
Governs
Connects to governance engines for compliance scanning, proof bundles, and audit evidence.
The Standard
AI Attestation is a declarative YAML file stored in your repository root, alongside LICENSE and SECURITY.md. It provides machine readable answers to regulators, auditors, and engineering leaders about how much of your code is AI generated.
Badge Preview
# AI Attestation
# https://oss.korext.com/ai-attestation
schema: https://oss.korext.com/ai-attestation/schema
version: "1.0"
repo:
owner: acme
name: payments-service
url: https://github.com/acme/payments-service
generated: "2026-04-15T12:00:00Z"
range:
from: "2025-01-01T00:00:00Z"
to: "2026-04-15T12:00:00Z"
commits: 1247
ai:
assisted_commits: 438
percentage: 35.1
tools:
- name: GitHub Copilot
identifier: copilot
first_seen: "2025-09-01"
last_seen: "2026-04-15"
commit_count: 312
- name: Cursor
identifier: cursor
first_seen: "2026-01-15"
last_seen: "2026-04-14"
commit_count: 89Get Your Badge
Generate a dynamic SVG badge for your repository.
Supported Tools
Detects 11 AI coding tools from publicly observable git patterns.
Why This Matters
35% of production code is now AI generated. The EU AI Act requires transparency. SOX auditors are asking. Insurance questionnaires now include AI tool usage. Your team needs answers before the questions arrive.
Frequently Asked Questions
How does AI Attestation detect AI tools?
AI Attestation analyzes publicly observable git patterns including co-author trailers, commit message patterns, and file header markers. It does not access proprietary data or require API keys.
Is AI Attestation free?
Yes. AI Attestation is free and open source under Apache 2.0. The specification is CC0 1.0 (public domain). There are no paid tiers.
Does it work with private repositories?
Yes. AI Attestation runs entirely locally. Your code never leaves your machine. The CLI reads your local git history and writes a YAML file to your repository root.
What is the governance tier?
The governance tier indicates whether AI generated code in your repository has been scanned by a governance engine. UNGOVERNED means no scanning. SCANNED means a tool has analyzed the code. ATTESTED means cryptographic proof bundles exist for every AI change.