# The Gatekeepers

- **Event:** [Meta Global AI Developer Hackathon](https://cerebralvalley.ai/e/meta-ai-developer-hackathon)
- **When:** Oct 26, 12:00 PM – Nov 4, 9:00 PM (EST)
- **Where:** Online
- **Team:** [Prateek Pal](https://cerebralvalley.ai/u/palprateek_04)
- **GitHub:** https://github.com/palprateek/Veripack/tree/main
- **Demo video:** https://youtu.be/_dYGL9LlisI
- **Gallery:** https://cerebralvalley.ai/e/meta-ai-developer-hackathon/hackathon/gallery
- **Page:** https://cerebralvalley.ai/e/meta-ai-developer-hackathon/hackathon/gallery/2599

Veripack is a private, trusted package registry for npm, pnpm, and Bun that audits every release before it becomes installable. Publishers use their normal workflow (or the veripack publish wrapper); each release is stored as pending, statically analyzed without executing package code (install scripts, capabilities, obfuscation, binary/WASM, dependency deltas), and evaluated against a strict team policy with a non-configurable safety floor. Low-risk releases auto-approve; medium/high go to human reviewers (with two-reviewer scopes and per-org self-approval rules); deterministic critical findings are blocked outright. Every verdict is immutable evidence — approvals are bound to an audit ID and policy version, and Postgres triggers make the evidence append-only even against the application's own database role. On the install side, yanked packages return 404 even for lockfile-pinned URLs, a blocklist takes precedence over caches, and every install attempt (allowed or blocked) is synchronously logged. Durable replay jobs, verified backups, MFA/step-up dashboard sessions, and a full audit trail make it production-grade. 168 unit tests and 38 real-Postgres integration tests prove the behavior.

## More from Meta Global AI Developer Hackathon

- [Fight Club](https://cerebralvalley.ai/e/meta-ai-developer-hackathon/hackathon/gallery/2596)
- [SignBridge](https://cerebralvalley.ai/e/meta-ai-developer-hackathon/hackathon/gallery/2597)
- [Ode: Give Muse a body](https://cerebralvalley.ai/e/meta-ai-developer-hackathon/hackathon/gallery/2598)
- [NOVA](https://cerebralvalley.ai/e/meta-ai-developer-hackathon/hackathon/gallery/2600)
- [Hull Forge](https://cerebralvalley.ai/e/meta-ai-developer-hackathon/hackathon/gallery/2601)
- [KimochiBuilds](https://cerebralvalley.ai/e/meta-ai-developer-hackathon/hackathon/gallery/2602)

---

Markdown version of https://cerebralvalley.ai/e/meta-ai-developer-hackathon/hackathon/gallery/2599. Site index for agents: https://cerebralvalley.ai/llms.txt · full text: https://cerebralvalley.ai/llms-full.txt