Writing
Codex CLI
Treeship and Codex CLI, by OpenAI.
Treeship 0.27: the custody handshake
Foreign work handed over A2A or MCP is refused until the other agent proves live key control, and the handoff receipt records that it did.
Treeship 0.10.4: the audit hardening release
A keystore that claimed AES-GCM but was not, verifiers that trusted embedded keys, and a Merkle downgrade path. 0.10.3 and 0.10.4 close the audit findings and publish TS-2026-001.
Treeship Agent Skills: One Skill, Every Agent
Install Treeship on Kimi Code CLI, Claude Code, Codex, Cursor, OpenClaw, and Hermes. One skill file teaches every agent how to create cryptographically signed trust receipts.
Treeship 0.10.1: agent-native sharing and a supply-chain floor
An agent in a fresh sandbox can install Treeship, run a session, and return three working URLs. 0.10.1 hardens the binary, keystore, SDK, and MCP server underneath.
Treeship 0.9.10: approval authority
Grants define authority, uses prove consumption, an append-only journal enforces replay, and packages carry the evidence. The 0.9.10 patch closes the bypasses an adversarial review found.
Treeship 0.9.6: the trust fabric
Three-layer file capture, tool usage checked against the agent certificate, and scoped approvals. A receipt can now say whether the agent stayed inside its bounds.