Meridian

Append-only engineering governance — the fixed point of truth

Immutable audit trail + policy-as-code for Git-based engineering workflows.
Webhook events → hash-chained ledger → real-time policy → Ed25519 signed export.

What it does

• Webhook collector — GitHub/GitLab events, append-only SHA-256 chain per tenant
• Policy engine — configurable rules, critical violation flags
• Signed export — audit bundles with Ed25519; offline CLI verify
• Multi-tenant isolation — PostgreSQL RLS

Stack

TypeScript · Fastify · PostgreSQL (RLS + append-only) · Docker · Ed25519 · SBOM/Cosign release path

Quickstart

make setup && make up
# Collector :8080 · Policy :8081

POST /webhooks/github
POST /webhooks/gitlab
GET  /audit/integrity?tenant_id=...
GET  /audit/export?tenant_id=...&from=...&to=...
GET  /metrics

node apps/cli/meridian.js verify --bundle audit-export.json --key <export_signing_key>

Why this matters to hiring managers

Governance and auditability are table stakes for regulated / enterprise engineering. Meridian shows tamper-evident design, not slides.

Author: Felipe Fernandes · Orbit portfolio

---

Live demo

Try it in the browser (no clone): see badge / homepage above, or the Labs hub.

Constellation

Project	Demo
CardOpsAI	lab
BridgeTrace-AI	lab
Meridian	lab
TrustHire	lab
secure-ship-kit	lab
agentic-rag-cite	lab
hitl-langgraph-kit	lab
forge-mcp-server	lab
agent-eval-harness	lab
lgpd-checklist-agent	lab
hiring-packet	lab
philo-ai-os	lab
balcaoia-local	studio

Portfolio: felipeofdev-ai.github.io · Author: Felipe Fernandes · felipe.of.dev@gmail.com

If this helped you, star this repo — organic only. No bots, no paid stars.