$git clone https://github.com/davidnichols-ops/trustcard
Installs into the current project.
Summary
Cryptographic trust infrastructure for MCP servers — signed manifests, TOFU pinning, two-gate enforcement, and the "npm audit" scanner.