diff --git a/go.mod b/go.mod
new file mode 100644
index 0000000..552655c
--- /dev/null
+++ b/go.mod
@@ -0,0 +1,7 @@
+module github.com/go-fed/activity
+
+require (
+	github.com/go-fed/httpsig v0.1.0
+	github.com/go-test/deep v1.0.1
+	golang.org/x/time v0.0.0-20180412165947-fbb02b2291d2
+)
diff --git a/go.modverify b/go.modverify
new file mode 100644
index 0000000..302241e
--- /dev/null
+++ b/go.modverify
@@ -0,0 +1,5 @@
+github.com/go-fed/httpsig v0.1.0 h1:clkeIoBexg4Fmc8u5mneN5nFPdisCWHATTB8mMsP+/E=
+github.com/go-test/deep v1.0.1 h1:UQhStjbkDClarlmv0am7OXXO4/GaPdCGiUiMTvi28sg=
+golang.org/x/crypto v0.0.0-20180527072434-ab813273cd59 h1:hk3yo72LXLapY9EXVttc3Z1rLOxT9IuAPPX3GpY2+jo=
+golang.org/x/sys v0.0.0-20180525142821-c11f84a56e43 h1:PvnWIWTbA7gsEBkKjt0HV9hckYfcqYv8s/ju7ArZ0do=
+golang.org/x/time v0.0.0-20180412165947-fbb02b2291d2 h1:+DCIGbF/swA92ohVg0//6X2IVY3KZs6p9mix0ziNYJM=