GitGhost

Sign a commit as one of N declared contributors. Verifiers can prove the commit came from your trusted set, but cannot tell which member signed. Same git, same trailers, same workflow — with cryptographic anonymity layered on top.