New:Microsoft Teams Notifications Are Now Available in Socket.Learn more
Get Started

@lockstep-ai/lockstep

Package Overview
Dependencies
Maintainers
1
Versions
8
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install
Package was removed
Sorry, it seems this package was removed from the registry

@lockstep-ai/lockstep

Cryptographic verification for AI coding agents. Stop trusting your AI agent — verify it.

latest
Source
npmnpm
Version
0.1.7
Version published
Weekly downloads
0
Maintainers
1
Weekly downloads
 
Created
Source

Lockstep

npm version License: Proprietary Node.js

Cryptographic verification for AI coding agents.

Stop trusting your AI agent. Verify it.

Define steps. Set validation criteria. Let the agent work. Lockstep generates a verifiable execution receipt proving every step passed.

Install

npm install -g @lockstep-ai/lockstep

Setup

lockstep setup

Choose between using your Claude subscription (zero setup) or an Anthropic API key.

Usage

Create a spec from a template:

lockstep init nextjs-saas

Or write your own .lockstep.yml:

version: "1"

config:
  agent: "claude-code"
  max_retries: 3
  step_timeout: 300

context: |
  Building a REST API with Express.js and TypeScript.

steps:
  - name: "Initialize project"
    prompt: |
      Create an Express.js project with TypeScript.
      Set up tsconfig.json, install dependencies, create src/index.ts.
    validate:
      - type: file_exists
        target: "package.json"
      - type: file_exists
        target: "src/index.ts"
      - type: file_contains
        path: "package.json"
        pattern: "express"

  - name: "Add tests"
    prompt: |
      Write tests for the API using Jest.
    validate:
      - type: test_passes
        command: "npm test"
      - type: ai_judge
        criteria: |
          Are the tests comprehensive? Score 1-10.
        threshold: 6.0
        evaluation_method: "file_content"
        evaluation_targets:
          - "src/__tests__/"

Run it:

lockstep run

Lockstep executes each step, validates the results, and produces a cryptographic receipt chaining every step together.

Verify a Receipt

Anyone with the receipt can independently verify the hash chain:

lockstep verify .lockstep/receipt.json

Validators

TypeDescription
file_existsFile exists at path
file_not_existsFile does not exist
file_containsFile matches a pattern
file_not_containsFile does not match a pattern
command_passesShell command exits 0
command_outputCommand stdout matches pattern
api_respondsHTTP endpoint returns expected status
json_validFile contains valid JSON
type_checkTypeScript type checking passes
lint_passesLinter passes
test_passesTest command passes
ai_judgeAI evaluation against your criteria

Templates

lockstep init <template>
lockstep templates          # list all
TemplateDescription
blankEmpty starter
nextjs-saasFull-stack Next.js SaaS app
rest-apiExpress.js REST API with TypeScript
solana-programSolana program with Anchor

CLI Reference

CommandDescription
lockstep run [spec]Execute a spec and generate a receipt
lockstep validate [spec]Validate a spec without running
lockstep init [template]Create a spec from a template
lockstep verify <receipt>Verify a receipt's integrity
lockstep templatesList available templates
lockstep setupConfigure authentication

Run options: --dry-run, --step <n>, --from <n>, --verbose, --no-color, --output <path>

Agent Support

AgentStatus
Claude CodeSupported
CursorComing soon
GitHub CopilotComing soon

License

Proprietary. See LICENSE for details.

Keywords

ai

FAQs

Package last updated on 02 Mar 2026

Related posts