CLI command
probierz verify-receipt
Verify a receipt's payload hash, Ed25519 signature, trust, and optional expected public-key fingerprint.
Invocation#
probierz verify-receipt [FILE]Required inputs and options#
- `<file>` is required. `--public-key` supplies an explicit trusted key; `--fingerprint` supplies the expected fingerprint.
Output and state effects#
Writes verification details as JSON. If `valid` is false, the command sets exit code 1 and does not modify the receipt.
Exact refusals#
- Missing file: `verify-receipt needs a file`.
- Missing/unsupported signatures, non-Ed25519 keys, malformed receipts, hash mismatch, and trust/fingerprint mismatch cannot produce `valid: true`.
Source snapshot#
Generated from the Rust binaries at https://github.com/wisent-ai/probierz.git revision `f40fa7ed94a028b56b5a59342eaf55982ba5cf7d`.
Combined help SHA-256: `04bab0ac1e9691119efcb70627b534a73431f51bb44ed8ba81d93cc10afd6569`; binary SHA-256: `08424ee2465261eafaa112d13ef05a20ce1fe1b6479e896341e22fbc55e61d3e`.