Signetry · bkd-dotcom · Aug 12, 2026 · Aug 12, 2026
diff --git a/.github/workflows/cla.yml b/.github/workflows/cla.yml
@@ -45,10 +45,10 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
           path-to-signatures: "signatures/cla.json"
-          path-to-document: "https://github.com/bkd-dotcom/umbra-precommit/blob/main/CLA.md"
+          path-to-document: "https://github.com/Signetry/precommit/blob/main/CLA.md"
           branch: "cla-signatures"
           allowlist: "dependabot[bot],bkd-dotcom"
-          custom-notsigned-prcomment: "Thanks for your contribution! Before it can be merged, please read the **[Contributor License Agreement](https://github.com/bkd-dotcom/umbra-precommit/blob/main/CLA.md)** — Umbra is **All Rights Reserved**, and by signing you assign copyright/ownership of your contribution to the Owner (you may not use, sell, or commercialize it yourself). To agree, reply with exactly:"
+          custom-notsigned-prcomment: "Thanks for your contribution! Before it can be merged, please read the **[Contributor License Agreement](https://github.com/Signetry/precommit/blob/main/CLA.md)** — Umbra is **All Rights Reserved**, and by signing you assign copyright/ownership of your contribution to the Owner (you may not use, sell, or commercialize it yourself). To agree, reply with exactly:"
           custom-pr-sign-comment: "I have read the CLA Document and I hereby sign the CLA"
           custom-allsigned-prcomment: "All contributors have signed the CLA. ✅"
           lock-pullrequest-aftermerge: false
diff --git a/.github/workflows/reviewer.yml b/.github/workflows/reviewer.yml
@@ -3,7 +3,7 @@ name: Reviewer
 # Advisory PR review (umbra-reviewer): surfaces architecture + security issues
 # and posts one recommendation comment. Advisory only — it never merges and never
 # fails the PR. Changes to security-sensitive surfaces (workflows, packaging) are
-# escalated to a human. See https://github.com/bkd-dotcom/umbra-reviewer
+# escalated to a human. See https://github.com/Signetry/reviewer
 on:
   pull_request:
 
@@ -24,7 +24,7 @@ jobs:
           python-version: "3.12"
       - name: Install umbra-reviewer
         # source-available (All Rights Reserved); install from source, not PyPI.
-        run: pip install "umbra-reviewer @ git+https://github.com/bkd-dotcom/umbra-reviewer@v0.1.1"
+        run: pip install "umbra-reviewer @ git+https://github.com/Signetry/reviewer@v0.1.1"
       - name: Compute the PR diff
         env:
           BASE_SHA: ${{ github.event.pull_request.base.sha }}

diff --git a/.pre-commit-hooks.yaml b/.pre-commit-hooks.yaml
@@ -1,12 +1,12 @@
 # Umbra pre-commit hook. Add to your repo's .pre-commit-config.yaml:
 #
 #   repos:
-#     - repo: https://github.com/bkd-dotcom/umbra-precommit
+#     - repo: https://github.com/Signetry/precommit
 #       rev: v0.3.0
 #       hooks:
 #         - id: umbra-guard
 #
-# Requires: pip install "umbra-core @ git+https://github.com/bkd-dotcom/umbra-core@v0.5.3"
+# Requires: pip install "umbra-core @ git+https://github.com/Signetry/core@v0.5.3"
 - id: umbra-guard
   name: Umbra guard (contract scope check)
   description: Block staged changes that fall outside .umbra/admission.yaml scope.

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -7,7 +7,7 @@ Follows [Keep a Changelog](https://keepachangelog.com/) / [SemVer](https://semve
 ### Added
 
 - Split out of the `umbra-plugins` monorepo into a dedicated repository under the
-  [Umbra umbrella](https://github.com/bkd-dotcom/umbra-umbrella), per the platform
+  [Umbra umbrella](https://github.com/Signetry/signetry), per the platform
   architecture (one repo per integration).
 - Pins `umbra-core>=0.3.0` (capability graph, plan binding, masked verifier,
   G1/G2/G3 gates, extension admission).
diff --git a/CODE_OF_CONDUCT.md b/CODE_OF_CONDUCT.md
@@ -52,7 +52,7 @@ an individual is officially representing the community in public spaces.
 
 Instances of abusive, harassing, or otherwise unacceptable behavior may be
 reported to the maintainers via
-[GitHub private vulnerability reporting](https://github.com/bkd-dotcom/umbra-precommit/security/advisories/new)
+[GitHub private vulnerability reporting](https://github.com/Signetry/precommit/security/advisories/new)
 or by opening a confidential issue. All complaints will be reviewed and
 investigated promptly and fairly.
 

diff --git a/PRIVACY.md b/PRIVACY.md
@@ -9,7 +9,7 @@ in this repository) run entirely **locally and offline**:
 
 - The `PreToolUse` guard hook reads the proposed file path or command from the
   editor and checks it against your repository's `.umbra/admission.yaml` using the
-  local `umbra` command (from the [umbra-core](https://github.com/bkd-dotcom/umbra-core)
+  local `umbra` command (from the [umbra-core](https://github.com/Signetry/core)
   Python package). No data leaves your machine.
 - The plugin makes **no network requests**, sends **no telemetry or analytics**,
   and stores **no personal data**. It has no servers and no backend.
@@ -22,5 +22,5 @@ Any network behavior is determined solely by tools **you** invoke (e.g. your own
 ## Contact
 
 Questions: open an issue at
-<https://github.com/bkd-dotcom/umbra-plugins/issues> or email
+<https://github.com/Signetry/plugins/issues> or email
 `binaydalai2024@gmail.com`.
diff --git a/README.md b/README.md
@@ -6,13 +6,13 @@
 
 **Govern coding-agent changes at the git boundary — pre-commit, pre-push, or CI.**
 
-The universal, editor-agnostic guard for [umbra-core](https://github.com/bkd-dotcom/umbra-core):
+The universal, editor-agnostic guard for [umbra-core](https://github.com/Signetry/core):
 a deterministic pre-action check that blocks changes falling outside your repo's
 `.umbra/admission.yaml` scope, before they're committed or pushed.
 
-Part of the [Umbra platform](https://github.com/bkd-dotcom/umbra-umbrella).
+Part of the [Umbra platform](https://github.com/Signetry/signetry).
 
-> Prerequisite: `pip install "umbra-core @ git+https://github.com/bkd-dotcom/umbra-core@v0.5.4"` and a `.umbra/admission.yaml` in
+> Prerequisite: `pip install "umbra-core @ git+https://github.com/Signetry/core@v0.5.4"` and a `.umbra/admission.yaml` in
 > your repo (a conservative default applies without one).
 
 ## pre-commit
@@ -21,7 +21,7 @@ Add to your `.pre-commit-config.yaml`:
 
 ```yaml
 repos:
-  - repo: https://github.com/bkd-dotcom/umbra-precommit
+  - repo: https://github.com/Signetry/precommit
     rev: v0.3.0
     hooks:
       - id: umbra-guard
@@ -51,7 +51,7 @@ Try it: `demos/try-guard.sh`.
 
 A local hook is best-effort defense-in-depth (a developer can `--no-verify`). The
 enforced gate is the **Umbra Admission** required check on the PR:
-<https://github.com/bkd-dotcom/umbra-action>. Nothing merges without a signed
+<https://github.com/Signetry/action>. Nothing merges without a signed
 receipt, and `auto_merge` is always false — a human merges.
 
 ## License

diff --git a/SECURITY.md b/SECURITY.md
@@ -1,21 +1,21 @@
 # Security policy
 
-This integration is a thin surface over [umbra-core](https://github.com/bkd-dotcom/umbra-core),
+This integration is a thin surface over [umbra-core](https://github.com/Signetry/core),
 which owns all governance logic. Please report vulnerabilities in the governance
 pipeline (contract evaluation, guard, verifier, receipts) against **umbra-core**.
 
 ## Reporting
 
 Open a private security advisory on the affected repository, or use the umbrella's
-security contact: <https://github.com/bkd-dotcom/umbra-umbrella>. Do not open a
+security contact: <https://github.com/Signetry/signetry>. Do not open a
 public issue for an unpatched vulnerability.
 
 ## Scope and guarantees
 
 - The soft, in-editor guard is **defense-in-depth**. It may fail open only with a
   loud `INACTIVE` signal; it is not the hard security boundary.
 - The hard guarantee is the required check on the pull request
-  ([umbra-action](https://github.com/bkd-dotcom/umbra-action)) plus the signed
+  ([umbra-action](https://github.com/Signetry/action)) plus the signed
   receipt — verifiable offline against Umbra's pinned public key.
 - `auto_merge` is always false. Umbra governs the agent; a human merges.
 - This integration never reimplements policy; it pins `umbra-core`.
diff --git a/demos/try-guard.sh b/demos/try-guard.sh
@@ -6,7 +6,7 @@
 # .umbra/admission.yaml, showing forbidden paths/commands blocked and an in-scope
 # path allowed. Deterministic (umbra-core), never the model.
 #
-# Requirements: bash, git, and `pip install "umbra-core @ git+https://github.com/bkd-dotcom/umbra-core@v0.5.4"`.
+# Requirements: bash, git, and `pip install "umbra-core @ git+https://github.com/Signetry/core@v0.5.4"`.
 #
 # Usage:  bash demos/try-guard.sh
 set -euo pipefail

diff --git a/universal/umbra-guard.sh b/universal/umbra-guard.sh
@@ -6,7 +6,7 @@
 # or manually. It checks proposed file paths and/or a command against the repo's
 # .umbra/admission.yaml and exits non-zero (blocking) on a violation.
 #
-# Requires:  pip install "umbra-core @ git+https://github.com/bkd-dotcom/umbra-core@v0.5.4"
+# Requires:  pip install "umbra-core @ git+https://github.com/Signetry/core@v0.5.4"
 #
 # Usage:
 #   umbra-guard.sh --path src/app.py
@@ -17,7 +17,7 @@
 set -euo pipefail
 
 if ! command -v umbra >/dev/null 2>&1; then
-  echo "umbra-guard: umbra-core not installed. Run: pip install 'umbra-core @ git+https://github.com/bkd-dotcom/umbra-core@v0.5.4'" >&2
+  echo "umbra-guard: umbra-core not installed. Run: pip install 'umbra-core @ git+https://github.com/Signetry/core@v0.5.4'" >&2
   # Fail open by default so this never blocks a commit unexpectedly; set
   # UMBRA_GUARD_STRICT=1 to fail closed when umbra is missing.
   [ "${UMBRA_GUARD_STRICT:-0}" = "1" ] && exit 1 || exit 0