--- title: "Trooth command-line tool 0.14.0: a company's own signed declaration, and the proof behind each tie in the public record: Trooth changelog - Trooth" description: "A company can now sign and publish its own declaration at /.well-known/trooth.json on its domain, naming its keys, products, application programming interfaces (APIs) and code repositories, and trooth declare makes, signs and checks it. Each public record reading now names the proof behind each tie between a domain and a company, a key, a product or a repository." canonical_url: "https://trooth.co/changelog/2026-10-07-cli-0-14-0-declarations" markdown_url: "https://trooth.co/changelog/2026-10-07-cli-0-14-0-declarations.md" generated_from: "the rendered page, converted to Markdown when this was requested" agent_index: "https://trooth.co/llms.txt" --- [Back to changelog](https://trooth.co/changelog) New October 7, 20262 minute read # Trooth command-line tool 0.14.0: a company's own signed declaration, and the proof behind each tie in the public record A company can now sign and publish its own declaration at /.well-known/trooth.json on its domain, naming its keys, products, application programming interfaces (APIs) and code repositories, and trooth declare makes, signs and checks it. Each public record reading now names the proof behind each tie between a domain and a company, a key, a product or a repository. ## What changed trooth declare init makes the Ed25519 key for a domain's declaration, trooth declare sign writes and signs the file, and trooth declare check fetches a domain's declaration, or reads a saved file, and checks its domain, its dates, the addresses in it, its signature and an optional Domain Name System (DNS) TXT (text) record at _trooth-key that names the key. It exits 11 when the declaration has expired. Each public record reading now records the proof behind each tie: a DNS TXT record in the domain's zone, the site's signed declaration, a sign-in through the company's identity provider at the domain, a code sent to a mailbox at the domain, or control of a code repository organization that its code host shows as holding the domain. It carries what a declaration that checks names as subjects (the company's key, its products and its APIs), the representative Trooth recorded at claim time under an id that holds no personal data, and records when a declaration appears, changes key or disappears. The guard can now require domain control: a proof that binds the domain to the company's record or to its declared key, confirmed by a DNS TXT record, a mailbox code, an identity provider sign-in or a declaration that checks, is a claim the guard reads from the signed public record. The company record at trooth.co/api/network/profile now carries Trooth's own record of the domain claim in authority.claim. The declaration has a published JSON Schema, a machine-readable description of every field. ## Why it changed A reader needs to know how a domain is tied to a company, a key or a product before relying on the tie. A file the company signs at its own domain, read and logged by Trooth, makes the company's own key and every later change to it public, and naming the proof behind each tie lets a reader weigh it. ## Who is affected - **Affected:** Companies that want to state their own keys and subjects at their domain, and anyone relying on a company's public record or running the guard. - **Availability:** npm, as trooth 0.14.0. No account. - **Release stage:** Available. - **Areas:** CLI, API. ## What to do **No action required.** Nothing is required. To publish a declaration, run trooth declare init and trooth declare sign, place the file at /.well-known/trooth.json on your domain, and run trooth declare check. ## Versions and migration - **trooth:** `0.14.0` ## Dates - **Announced:** October 7, 2026, the day this entry was written. Entries are never backdated. - **Released:** October 7, 2026. ## What this does not fix A declaration is signed by the company itself: it shows who controlled the site's content when Trooth read it, not the legal entity or a person's authority to act for it. Trooth does not yet offer a sign-in through a company's identity provider as a way to claim a domain, so no claim record carries that proof today. An outside security review of the guard and production use by teams outside Trooth are still open. ## Read more - [Declarations in the CLI reference](https://trooth.co/docs/cli#declare) - [The declaration format](https://github.com/troothllc/trooth-cli/blob/main/docs/DECLARATION.md) On this page - What changed - Why it changed - Who is affected - What to do - Versions and migration - Dates - What this does not fix - Read more [New](https://trooth.co/changelog?type=new)[CLI](https://trooth.co/changelog?area=cli)[API](https://trooth.co/changelog?area=api) [Back to changelog](https://trooth.co/changelog) ## Related changes - [OCT.07NewTrooth command-line tool 0.13.0: the guard for agent actions, and what each public record reading rests onCLI +1](https://trooth.co/changelog/2026-10-07-cli-0-13-0-guard) - [OCT.07NewTrooth command-line tool 0.12.0: MCP tool fingerprints, more of the public record, and a hardware key for the logCLI +1](https://trooth.co/changelog/2026-10-07-cli-0-12-0-mcp-tools) - [OCT.07NewTrooth command-line tool 0.11.0: witnesses for the log, and a signed public recordCLI +1](https://trooth.co/changelog/2026-10-07-cli-0-11-0-witnesses) - [OCT.07NewTrooth command-line tool 0.10.0: what a company published outside its own siteCLI +1](https://trooth.co/changelog/2026-10-07-cli-0-10-0-public-record) - [OCT.06NewTrooth command-line tool 0.9.0: a public log of every signed readingCLI +1](https://trooth.co/changelog/2026-10-06-cli-0-9-0-log) - [OCT.06NewTrooth command-line tool 0.8.0: bundles, statement v3, schemas and librariesCLI +1](https://trooth.co/changelog/2026-10-06-cli-0-8-0-bundles) ## Follow what changes at Trooth Every entry by email, or a feed narrowed to one area or to the changes that need you to act. ## Product updates by email Occasional notes when something on this page changes. You get one confirmation email when you subscribe, every email carries an unsubscribe link, and the address is never sold or shared. Email address [RSS](https://trooth.co/changelog/rss.xml)[CLI only](https://trooth.co/changelog/rss.xml?area=cli)[Needs action](https://trooth.co/changelog/rss.xml?action=required) ## Structured data ```json { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://trooth.co/#org", "name": "Trooth", "legalName": "Trooth, LLC", "alternateName": [ "Trooth, LLC", "Trooth Network", "trooth.co" ], "url": "https://trooth.co", "logo": { "@type": "ImageObject", "@id": "https://trooth.co/#logo", "url": "https://trooth.co/brand/trooth-mark_black-on-white_1024.png", "contentUrl": "https://trooth.co/brand/trooth-mark_black-on-white_1024.png", "width": 1024, "height": 1024, "caption": "Trooth" }, "image": { "@id": "https://trooth.co/#logo" }, "description": "Trooth is an infrastructure and cybersecurity company providing Machine-Readable Trust. The Trooth Network keeps one current Machine-Readable Trust Profile per company, each fact sourced. Trooth signs what it witnessed; company declarations are unsigned.", "foundingDate": "2025-12-16", "address": { "@type": "PostalAddress", "streetAddress": "777 Brickell Ave, Suite 500, PMB 1174", "addressLocality": "Miami", "addressRegion": "FL", "postalCode": "33131", "addressCountry": "US" }, "contactPoint": { "@type": "ContactPoint", "contactType": "customer support", "email": "hello@trooth.co", "url": "https://trooth.co/contact" }, "sameAs": [ "https://x.com/Troothllc", "https://github.com/troothllc", "https://www.crunchbase.com/organization/trooth", "https://www.wikidata.org/wiki/Q141292994", "https://www.youtube.com/@Troothllc", "https://www.trustpilot.com/review/trooth.co" ] }, { "@type": "WebSite", "@id": "https://trooth.co/#website", "url": "https://trooth.co", "name": "Trooth", "alternateName": "Trooth Network", "inLanguage": "en", "publisher": { "@id": "https://trooth.co/#org" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://trooth.co/network?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "ItemList", "@id": "https://trooth.co/#sitelinks", "name": "Trooth sitelinks", "itemListElement": [ { "@type": "SiteNavigationElement", "position": 1, "name": "Join Trooth for free", "url": "https://trooth.co/signup" }, { "@type": "SiteNavigationElement", "position": 2, "name": "Company, Trooth", "url": "https://trooth.co/network/company/trooth" }, { "@type": "SiteNavigationElement", "position": 3, "name": "Trooth Network", "url": "https://trooth.co/network" } ] } ] } ``` ```json { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://trooth.co/" }, { "@type": "ListItem", "position": 2, "name": "Changelog", "item": "https://trooth.co/changelog" }, { "@type": "ListItem", "position": 3, "name": "Trooth command-line tool 0.14.0: a company's own signed declaration, and the proof behind each tie in the public record", "item": "https://trooth.co/changelog/2026-10-07-cli-0-14-0-declarations" } ] } ```