Third-party producers participate through signed manifests + blind sessions — the core has no special case for any of them. A watcher can never produce W1a (machine truth is reserved to built-in verifiers), and each must pass the conformance kit (C1–C10: blindness, tier ceiling, abstain semantics, deadline, evidence shape) before it can be listed.
These are the example watchers we ship (11 shipped). In the
dogfood self-audit, one of them (compliance) is deliberately revoked
mid-run to generate a §6.6 revocation receipt, so the live index shows
10 active of 11 shipped — by design, not by drift.
Real third-party watchers join the same way — see
CONTRIBUTING.md.
| Watcher | Doctrine | Tier | Domains | Maintainer | Version |
|---|---|---|---|---|---|
| example-a11y | Accessibility Watcher | W3 |
accessibility, a11y, compliance |
veridict-examples | v0.1.0 |
| example-aiact-transparency | EU AI Act Transparency Watcher | W1b |
aiact, transparency, disclosure, gpai |
veridict-examples | v0.1.0 |
| example-compliance | Compliance Watcher | W3 |
* (all) |
veridict-examples | v0.1.0 |
| example-cost | Cost Watcher | W1b |
cost, performance |
veridict-examples | v0.1.0 |
| example-doc-sync | Doc Sync Watcher | W3 |
documentation, docs, compliance |
veridict-examples | v0.1.0 |
| example-docker-best-practices | Docker Best Practices Watcher | W3 |
docker, deployment, security |
veridict-examples | v0.1.0 |
| example-import-weight | Import Weight Watcher | W1b |
performance, startup, cost |
veridict-examples | v0.1.0 |
| example-license-scan | License Scan Watcher | W3 |
license, compliance |
veridict-examples | v0.1.0 |
| example-sbom-spdx | SBOM SPDX Watcher | W3 |
sbom, supply-chain, compliance |
veridict-examples | v0.1.0 |
| example-secret-scan | Secret Scan Watcher | W1b |
secret, security, credentials |
veridict-examples | v0.1.0 |
| example-security | Security Watcher | W1b |
payments, security |
veridict-examples | v0.1.0 |
An index is a VIEW of registered manifests exported from a ledger — never a separate truth. Offline consumers verify:
veridict registry index --registry r.jsonl --out index.json
…then validate index.json against the ledger they trust. Revoked
watchers never appear in an index (§6.6 — an index that lists revoked
watchers is a CRL nobody reads).