Rendered WAV
Output a plugin, DAW, or renderer already produced. Audio Attest does not create it.
Signed-reference audio-regression proof
Bellweather Audio Attest
Open-source, headless C++ audio-regression proof layer. Bless a known-good render into a cryptographically signed reference, then verify later renders against it in CI.
Built to sit beside Bellweather Audio Core, with a standalone focus on signed render evidence rather than reusable metering source.
Signed referencesDSSE-signed golden references with a per-detector trust boundary
Apache-2.0Bellweather source published under a permissive license
JUCE-freevalidates rendered output; it does not host plugins
JUCE Marketplacelisted for developers who want the public release context in the JUCE ecosystem
Bless a render. Verify every render after.
Audio Attest is the evidence side of a release pipeline. It does not host plugins or judge audio quality; it proves that a render did not change from a known-good baseline.
bless
Mint a cryptographically signed reference from a known-good render.
Detector lanes
Loudness (BS.1770 / EBU R128), THD, aliasing, stereo, spectral mask, numeric hygiene.
Signed reference
A DSSE envelope and VSA predicate over a ULP-bounded baseline of the render.
verify in CI
Compare later renders against the reference and emit PASS or FAIL evidence.
Four verbs over rendered WAV files.
Audio Attest is a single CLI, `bpts`, with four commands. Signed verbs carry a cryptographic trust boundary; unsigned verbs are local diagnostics.
bpts bless mints a signed reference from a known-good render; bpts verify validates the envelope and diffs a candidate render against it.
bpts compare diffs two raw WAV files without signatures; bpts scan runs detector lanes over a single render.
Detector lanes
loudness
BS.1770 / EBU R128
Integrated LUFS, true-peak, and loudness range against the blessed baseline.
thd
Total harmonic distortion
Harmonic energy measured against the fundamental of a tone render.
aliasing
Aliasing
Inharmonic energy from undersampled nonlinearity in the signal path.
stereo
Stereo field
Channel correlation, width, and mono fold-down safety.
spectral
Spectral mask
Per-band energy checked against a reference spectral envelope.
numeric
Numeric hygiene
NaN, Inf, denormal, and DC-offset scrubbing before comparison.
Public proof
Signed verify
Validate the signed envelope, then diff a candidate render against the blessed reference.
bpts verify \ --reference ref.bpts.json \ --candidate render.wav \ --public-key pub.pem
CLI smoke
The full bless, verify, compare, and scan workflow over synthetic fixtures.
ctest \ --test-dir build \ -R attest_cli \ --output-on-failure
Docker lanes
Linux clean-room lanes cover Clang, GCC with strict conversions, and libFuzzer.
tools/docker_lanes.sh
Sanitizers and fuzz
ASan, UBSan, and TSan plus fuzzed JSON and WAV parsers with a determinism invariant.
ctest \ --test-dir build \ -L detectors \ --output-on-failure
Worked case study
Barometer is the case study.
The repo ships per-OS signed golden references for the free Barometer metering plugin. It is the connective proof between Audio Attest and Bellweather Audio Core.
Pair it with the Audio Core repository when you want the source-built metering layer and the signed-render proof layer side by side.
Included: per-OS signed golden references for macOS, Linux, and Windows.
Included: synthetic, license-clean input generators and the case-study public key.
Not included: the private signing key or any prebuilt Barometer binary.
Signed-reference proof layer
Clone the source. Verify a render.
Signed-reference verify, four detector-covered CLI verbs, fuzzed JSON and WAV parsers, and cross-platform CI ship with the source.
Built by Bellweather Studios.
git clone https://github.com/keithhetrick/bellweather-audio-attest.git cd bellweather-audio-attest cmake --preset default -DBUILD_TESTING=ON cmake --build --preset default ctest --test-dir build --output-on-failure
Bellweather Audio Attest is the public source surface. GitHub is the code surface.