CLI command
probierz receipt
Validate selected evidence against exact source identities and sign one release receipt.
Invocation#
probierz receipt [APP_ID] [RELEASE] [EXPECTED_HARNESS_SHA]Required inputs and options#
- Application ID, release ID, lowercase harness SHA-256, lowercase source SHA-256, and at least one run ID are required.
- `--minimum` defaults to `E3`; `--journeys` constrains required journey coverage. Signing uses `PROBIERZ_RECEIPT_PRIVATE_KEY_FILE`.
Output and state effects#
Writes a signed Ed25519 evidence receipt and returns its result as JSON. A receipt whose evidence verdict does not pass sets exit code 1.
Exact refusals#
- Missing core fields: `appId, release, expectedHarnessSha, and expectedSourceSha are required`; invalid hashes and an empty run list are refused.
- Unknown evidence levels and missing/non-Ed25519 signing keys are refused.
- Source mismatch, missing journey/build/artifact evidence, or insufficient evidence level yields a non-passing receipt verdict, never an approval.
Source snapshot#
Generated from the Rust binaries at https://github.com/wisent-ai/probierz.git revision `f40fa7ed94a028b56b5a59342eaf55982ba5cf7d`.
Combined help SHA-256: `04bab0ac1e9691119efcb70627b534a73431f51bb44ed8ba81d93cc10afd6569`; binary SHA-256: `08424ee2465261eafaa112d13ef05a20ce1fe1b6479e896341e22fbc55e61d3e`.