Step-by-step cookbook for setting up cryptographically signed audit trails on Claude Code tool calls. Use when explaining, evaluating, or demonstrating the pattern before committing to the protect-mcp runtime hooks. Covers Cedar policy, Ed25519 receipts, offline verification, tamper detection, CI/CD integration, and SLSA composition.
Install
npx skills add wshobson/agents --skill signed-audit-trails-recipenpx skills add wshobson/agents --skill signed-audit-trails-recipe -a claude-code -gnpx skills add wshobson/agents --skill signed-audit-trails-recipe -a codex -ggemini skills install https://github.com/wshobson/agents.git --path plugins/signed-audit-trails/skills/signed-audit-trails-recipegh skill install wshobson/agents signed-audit-trails-recipegit clone --depth 1 https://github.com/wshobson/agents /tmp/wshobson__agents
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/wshobson__agents/plugins/signed-audit-trails/skills/signed-audit-trails-recipe ~/.claude/skills/signed-audit-trails-recipe # Claude Code
cp -R /tmp/wshobson__agents/plugins/signed-audit-trails/skills/signed-audit-trails-recipe ~/.agents/skills/signed-audit-trails-recipe # Codex, Cursor, Gemini CLI, Copilot, OpenCode