ForgeCertify is the kernel certification system for the Forge suite. Every ForgeCAD release ships a signed manifest of 2,224 geometry tests — boolean operations, fillets, sweeps, assemblies, CAM, file formats. Customers verify independently with a single CLI command. No Forge account required. Live at forgecertify.org.
What makes ForgeCertify different
"Every ForgeCAD release ships a signed test manifest — 2,224 geometry tests, Ed25519-signed, independently verifiable."
The manifest names every test: boolean union of two intersecting spheres, fillet with variable radius on a non-manifold edge, sweep along a multi-rail guide curve. Each test has an expected result and a cryptographic hash of the output geometry. The manifest is signed with an Ed25519 key at build time. SolidWorks does not publish a test manifest. Fusion 360 does not publish a test manifest.
"Customers verify independently — without vendor access, without running a test suite, in under 30 seconds."
Install forgecertify from PyPI. Run forgecertify verify --manifest forgecad-2.x.x.manifest. The tool fetches the public key from forgecertify.org, verifies the signature, and outputs PASS or FAIL with the test count. No Forge account required. No network call to Forge servers. The public key is published on forgecertify.org and mirrored on GitHub.
"ForgeCertify extends to all Forge products — not just ForgeCAD."
The manifest format and Ed25519 signing infrastructure is product-agnostic. ForgeCAD geometry tests are the first manifest. ForgeOps decision logic tests, ForgeMaint PM scheduling tests, and ForgeRecovery restore integrity tests are on the roadmap. Every signed manifest is stored in ForgeKnowledge — the full certification history of every Forge product is queryable.
ForgeCertify runs automatically on every release. Customers verify without vendor involvement.
2,224 geometry tests run against the ForgeCAD B-rep kernel at build time. Each test checks a specific operation — boolean, fillet, sweep, loft, shell, assembly, drawing, CAM, file format. Pass/fail logged per test with output geometry hash.
A structured manifest is generated: product version, build timestamp, test count, pass count, fail count. Per-test entries include test name, category, expected result hash, and actual result hash.
The manifest is signed with an Ed25519 private key held in a hardware security module. The signature covers the full manifest bytes — any modification to any test result invalidates the signature.
The signed manifest is published to forgecertify.org and stored in ForgeKnowledge. The public key is published separately and mirrored on GitHub. Release is blocked if any test fails or if signing fails.
Customer runs forgecertify verify --manifest forgecad-2.x.x.manifest. The tool verifies the Ed25519 signature against the published public key. Output: PASS with test count, or FAIL with the reason. Under 30 seconds. No Forge account required.
Every geometry operation — boolean, fillet, sweep, loft, shell, assembly, drawing, CAM, import/export — covered by named tests with expected result hashes.
Structured YAML — product, version, timestamp, per-test entries with expected and actual result hashes. Ed25519 signature appended. Human-readable and machine-parseable.
pip install forgecertify. forgecertify verify --manifest forgecad-2.x.x.manifest. PASS or FAIL in under 30 seconds. No Forge account. No network call to Forge servers.
Every signed manifest is stored in ForgeKnowledge. The full certification history of every Forge release is queryable. External auditors do not need vendor access.
ForgeCAD geometry tests are the first manifest. ForgeOps, ForgeMaint, ForgeRecovery, ForgeCompliance, and ForgeHub tests are on the roadmap — same format, same signing infrastructure.
2,224
Geometry tests
ForgeCAD kernel — every operation covered
Ed25519
Signing algorithm
Hardware security module — build-time signing
30 sec
Independent verification
forgecertify verify — no Forge account needed
forgecertify.org
Public manifest host
GitHub-mirrored public key
Receives from
Every other CAD vendor asks you to trust that the geometry operations work. ForgeCertify provides proof — 2,224 named tests, signed at build time, verifiable by anyone with a Python environment and an internet connection. No vendor access required.