--- title: "Trooth command-line tool 0.8.0: bundles, statement v3, schemas and libraries: Trooth changelog - Trooth" description: "trooth verify can keep everything it checked in one file and check that file later with no network. It also checks statement v3, and the same checks now run as a library in JavaScript, Python and Go." canonical_url: "https://trooth.co/changelog/2026-10-06-cli-0-8-0-bundles" markdown_url: "https://trooth.co/changelog/2026-10-06-cli-0-8-0-bundles.md" generated_from: "the rendered page, converted to Markdown when this was requested" agent_index: "https://trooth.co/llms.txt" --- [Back to changelog](https://trooth.co/changelog) New October 6, 20261 minute read # Trooth command-line tool 0.8.0: bundles, statement v3, schemas and libraries trooth verify can keep everything it checked in one file and check that file later with no network. It also checks statement v3, and the same checks now run as a library in JavaScript, Python and Go. ## What changed --save-bundle writes the statement, the evidence manifest, the key list with the time it was read, and the exact mapping bytes to one file; --bundle checks that file and sends nothing. Every result names the statement by the SHA-256 of its signed bytes. Statement v3 is signed in the canonical form RFC 8785 defines, with the subject named by a stable id and the signing key named inside the signed bytes; Trooth keeps signing v2 until every surface that shows a statement checks v3. Published schemas describe every field of the statement, the key list, the manifest, the bundle and the result, and of the company record itself, and are served under trooth.co/schemas. The Python and Go libraries pass the same 27 test cases and 7 bundles as the command. ## Why it changed A check you cannot repeat later is hard to rely on, and a checker that exists only as a command forces every integrator to rewrite it. One portable file and one set of rules in three languages fix both. ## Who is affected - **Affected:** Anyone who keeps a record of what they checked, and developers who check Trooth readings inside their own software. - **Availability:** npm, as trooth 0.8.0; the Python and Go code in the trooth-cli repository. No account. - **Release stage:** Available. - **Areas:** CLI, API. ## What to do **No action required.** Nothing is required. Statements Trooth already published check exactly as before. ## Versions and migration - **trooth:** `0.8.0` ## Dates - **Announced:** October 6, 2026, the day this entry was written. Entries are never backdated. - **Released:** October 6, 2026. ## What this does not fix A bundle is only as fresh as the key list inside it: a key compromise announced after it was saved is not in it. Witness statements are not yet in a public transparency log, and the signed time is asserted by Trooth. ## Read more - [Libraries in the CLI reference](https://trooth.co/docs/cli#libraries) - [The published schemas](https://github.com/troothllc/trooth-cli/tree/main/schemas) - [The rules for checking a statement](https://github.com/troothllc/trooth-cli/blob/main/docs/VERIFY.md) On this page - What changed - Why it changed - Who is affected - What to do - Versions and migration - Dates - What this does not fix - Read more [New](https://trooth.co/changelog?type=new)[CLI](https://trooth.co/changelog?area=cli)[API](https://trooth.co/changelog?area=api) [Back to changelog](https://trooth.co/changelog) ## Related changes - [OCT.06NewTrooth command-line tool 0.7.0: check a signed reading yourselfCLI](https://trooth.co/changelog/2026-10-06-cli-0-7-0-verify) - [OCT.05NewAgents can read your own workspace record after sign-inAPI +1](https://trooth.co/changelog/2026-10-05-signed-in-agent-access) - [OCT.03ImprovementA reading limit that holds, token discovery for agents, and connected tracesAPI +3](https://trooth.co/changelog/2026-10-03-requirements-batch-17-50) - [SEP.29ImprovementSearch that finds products, standard errors, and a keyboard that reaches everythingNetwork +5](https://trooth.co/changelog/2026-09-29-requirements-batch-17-49) - [SEP.28ImprovementPlainer states, fairer comparisons, and a record you can pageTrust Profiles +5](https://trooth.co/changelog/2026-09-28-requirements-batch-17-48) - [SEP.28FixCorrections from the September 28 audit: contract 1, one interface catalog, a complete bill of materialsAPI +5](https://trooth.co/changelog/2026-09-28-fresh-audit-corrections) ## Follow what changes at Trooth Every entry by email, or a feed narrowed to one area or to the changes that need you to act. ## Product updates by email Occasional notes when something on this page changes. You get one confirmation email when you subscribe, every email carries an unsubscribe link, and the address is never sold or shared. Email address [RSS](https://trooth.co/changelog/rss.xml)[CLI only](https://trooth.co/changelog/rss.xml?area=cli)[Needs action](https://trooth.co/changelog/rss.xml?action=required) ## Structured data ```json { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://trooth.co/#org", "name": "Trooth", "legalName": "Trooth, LLC", "alternateName": [ "Trooth, LLC", "Trooth Network", "trooth.co" ], "url": "https://trooth.co", "logo": { "@type": "ImageObject", "@id": "https://trooth.co/#logo", "url": "https://trooth.co/brand/trooth-mark_black-on-white_1024.png", "contentUrl": "https://trooth.co/brand/trooth-mark_black-on-white_1024.png", "width": 1024, "height": 1024, "caption": "Trooth" }, "image": { "@id": "https://trooth.co/#logo" }, "description": "Trooth is an infrastructure and cybersecurity company providing Machine-Readable Trust. The Trooth Network keeps one current Machine-Readable Trust Profile per company, each fact sourced. Trooth signs what it witnessed; company declarations are unsigned.", "foundingDate": "2025-12-16", "address": { "@type": "PostalAddress", "streetAddress": "777 Brickell Ave, Suite 500, PMB 1174", "addressLocality": "Miami", "addressRegion": "FL", "postalCode": "33131", "addressCountry": "US" }, "contactPoint": { "@type": "ContactPoint", "contactType": "customer support", "email": "hello@trooth.co", "url": "https://trooth.co/contact" }, "sameAs": [ "https://x.com/Troothllc", "https://github.com/troothllc", "https://www.crunchbase.com/organization/trooth", "https://www.wikidata.org/wiki/Q141292994", "https://www.youtube.com/@Troothllc", "https://www.trustpilot.com/review/trooth.co" ] }, { "@type": "WebSite", "@id": "https://trooth.co/#website", "url": "https://trooth.co", "name": "Trooth", "alternateName": "Trooth Network", "inLanguage": "en", "publisher": { "@id": "https://trooth.co/#org" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://trooth.co/network?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "ItemList", "@id": "https://trooth.co/#sitelinks", "name": "Trooth sitelinks", "itemListElement": [ { "@type": "SiteNavigationElement", "position": 1, "name": "Join Trooth for free", "url": "https://trooth.co/signup" }, { "@type": "SiteNavigationElement", "position": 2, "name": "Company, Trooth", "url": "https://trooth.co/network/company/trooth" }, { "@type": "SiteNavigationElement", "position": 3, "name": "Trooth Network", "url": "https://trooth.co/network" } ] } ] } ``` ```json { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://trooth.co/" }, { "@type": "ListItem", "position": 2, "name": "Changelog", "item": "https://trooth.co/changelog" }, { "@type": "ListItem", "position": 3, "name": "Trooth command-line tool 0.8.0: bundles, statement v3, schemas and libraries", "item": "https://trooth.co/changelog/2026-10-06-cli-0-8-0-bundles" } ] } ```