Getting Started

Install the Geas CLI tool. Requires Rust toolchain.

cargo install geas-cli

Or download a pre-built binary from the releases page.

Generate an Ed25519 key pair for signing packages and issuing licenses.

geas keygen -o ./keys

Keep your private key safe. You'll need it for every publish and license operation.

Add Geas protection to your Rust crate. This marks critical functions for cryptographic enforcement and generates the geas.toml config.

geas wrap ./my-crate --license perpetual

License types: perpetual, subscription, usage-based, seat-based, trial.

Push the wrapped crate to the Geas registry. The archive is hashed, signed, and recorded in the tamper-evident ledger.

geas publish --registry https://api.numbral.com \
  --token $GEAS_TOKEN

Each publish creates a ledger entry with the Merkle root of your package.

Create shareable access links with tier-based permissions. Control who can read, execute, benchmark, or redistribute your code.

geas access create my-crate \
  --tier standard \
  --note "Acme Corp evaluation"

Links are HMAC-signed and support expiry, activation limits, and revocation.

Your customer receives an access link, activates their license, and builds normally. License validation is transparent at compile time.

geas activate <ACCESS_TOKEN>
cargo add my-crate --registry geas
cargo build  # license validated transparently

Offline grace period allows builds without network access for a configurable window.