Writing
Claude Code plugin
Treeship and Claude Code plugin, by Anthropic.
Any judge, one receipt
Fast decision models now sit between agents and actions, and none of them leaves a record a stranger can check. Treeship 0.31.6 to 0.31.9 added the judge slot: a contract any judge can speak, a deterministic judge we own, a signed receipt for every answer, and TypeSafe's Jev as the first outside judge behind it.
Ten steps, one receipt
TypeSafe's founder published a ten-step blueprint for building a control system around an LLM with Jev as the decision layer. Step ten is the decision receipt. Here is what Treeship signs at each of the ten, and the two fields we were missing until this week.
Receipts for agentic commerce
Anthropic's Claude Commerce Agents blueprint tells an agent what it may do in a store. Visa, Mastercard and Google are deciding how an agent may pay. Nobody in that stack keeps a record a stranger can check. Checked against a fresh clone.
You can't have agentic commerce without tamper-evident receipts
Anthropic's commerce-agents reference enforces its gates in code and leaves the record to the deployment. treeship-commerce is that record: every tool call signed on all three runtimes, the merchant's approval as a single-use grant, and a receipt for exactly the cart that went to checkout. Verifiable offline, wired by one command.
Treeship 0.27: the custody handshake
Foreign work handed over A2A or MCP is refused until the other agent proves live key control, and the handoff receipt records that it did.
Treeship 0.24: trusted rooms end to end
A room is a session whose participant set grows by signed invitation. 0.24 signs the room into the receipt, derives the roster from evidence, and adds a liveness challenge on join.
Treeship 0.19: the security-hardening release
Two adversarial audits, every confirmed finding in the default binary fixed with a regression test, and a receipt export any Ed25519 library can verify.
Treeship 0.18: onboard once, present anywhere
Signed work history, certificate chains to the ship, offline presentations with a challenge handshake, and a checkpoint-pinned track record.
Treeship 0.11: agent invitations
A second agent can join a session through a signed, single-use, expiring invitation that the host countersigns. Plus a local dashboard, a feature inventory, and new skills.
Treeship 0.9.6: the trust fabric
Three-layer file capture, tool usage checked against the agent certificate, and scoped approvals. A receipt can now say whether the agent stayed inside its bounds.
Treeship 0.9: the official Claude Code plugin
Two commands install a plugin whose hooks record every Claude Code session into a sealed receipt. TREESHIP.md tells the agent exactly what is captured.