# rederive

> A trust-nothing package manager. Every rederive package ships its contract — a structural spec (SIR) and a
> held-out oracle whose expected values were stamped by executing the original — not bytes you have to trust.
> Verify the shipped code against the contract (`rdv check`: deterministic, offline, no tokens), or re-derive
> the implementation locally from the spec and accept it only when independent blind rebuilds agree (quorum).
> Tampering is caught two ways at once: behavior fails the held-out oracle, and the content hash mismatches.
> Open source, Apache-2.0, from Semcom / Apilify Inc.

If you are an agent setting rederive up or running its loop for a user: fetch and follow
https://rederive.ai/prompt.md — it is the whole workflow, written for you, including the verification
discipline (expected values are never hand-authored; a failed gate is a finding, not retry-fodder; the
toolkit is immutable from your seat).

## Setup

- [Agent setup prompt](https://rederive.ai/prompt.md): install → choose verify / re-derive / preflight → run → report
- CLIs (Node ≥ 18): `npm i -g rederive sir-factory`
- Claude Code plugin: `/plugin marketplace add rederive/sir-toolkit` then `/plugin install sir@sir-toolkit`

## Specification

- [SIR Schema (normative, v0.4)](https://raw.githubusercontent.com/rederive/sir-spec/main/SIR_SCHEMA.md): the
  language-neutral contract format — kinds, the firewall, oracles, fidelity variants, effect seams, carried data,
  the concurrency layer
- [sir-spec repo](https://github.com/rederive/sir-spec): canonical home, versioned, evidence-cited
- [Narrative spec with worked examples](https://rederive.ai/spec.html)

## Source & packages

- [rederive (the rdv verifier CLI)](https://github.com/rederive/rederive) — npm: `rederive`
- [sir-factory (the build orchestrator)](https://github.com/rederive/sir-factory) — npm: `sir-factory`
- [sir-toolkit (the Claude Code plugin: sir-verify + preflight skills, role agents)](https://github.com/rederive/sir-toolkit)

## Commitments

- [The rederive Promise](https://rederive.ai/promise.html): never paywall verification, never cripple the open
  core, never retroactively relicense; the format carries no patent assertion against conforming implementations