CLI command

probierz receipt

Validate selected evidence against exact source identities and sign one release receipt.

Invocation#

Shell
probierz receipt [APP_ID] [RELEASE] [EXPECTED_HARNESS_SHA]

Required inputs and options#

  • Application ID, release ID, lowercase harness SHA-256, lowercase source SHA-256, and at least one run ID are required.
  • `--minimum` defaults to `E3`; `--journeys` constrains required journey coverage. Signing uses `PROBIERZ_RECEIPT_PRIVATE_KEY_FILE`.

Output and state effects#

Writes a signed Ed25519 evidence receipt and returns its result as JSON. A receipt whose evidence verdict does not pass sets exit code 1.

Exact refusals#

  • Missing core fields: `appId, release, expectedHarnessSha, and expectedSourceSha are required`; invalid hashes and an empty run list are refused.
  • Unknown evidence levels and missing/non-Ed25519 signing keys are refused.
  • Source mismatch, missing journey/build/artifact evidence, or insufficient evidence level yields a non-passing receipt verdict, never an approval.

Source snapshot#

Generated from the Rust binaries at https://github.com/wisent-ai/probierz.git revision `f40fa7ed94a028b56b5a59342eaf55982ba5cf7d`.

Combined help SHA-256: `04bab0ac1e9691119efcb70627b534a73431f51bb44ed8ba81d93cc10afd6569`; binary SHA-256: `08424ee2465261eafaa112d13ef05a20ce1fe1b6479e896341e22fbc55e61d3e`.