@pramanasystems/verifier-cli

Command-line interface for offline PramanaSystems attestation verification.

Overview

@pramanasystems/verifier-cli is a standalone CLI tool for verifying governance artifacts outside the production runtime. It reads a public key from ./dev-keys/bundle_signing_key.pub and performs cryptographic verification of attestations, release manifests, and runtime manifests.

Installation

npm install -g @pramanasystems/verifier-cli

Or run without installing via:

npx @pramanasystems/verifier-cli <command> <file>

Prerequisites

The CLI reads the signing public key from:

./dev-keys/bundle_signing_key.pub

This path is relative to your current working directory. Generate or copy your public key there before running verification commands.

Commands

verify-attestation <file>

Verifies the cryptographic signature of a governance attestation.

pramanasystems-verifier-cli verify-attestation ./attestation.json

The attestation file must contain decision, policyVersion, timestamp, and signature fields.

verify-release <file>

Verifies the cryptographic signature of a release manifest.

pramanasystems-verifier-cli verify-release ./release-manifest.json

The release manifest must contain version, artifacts, and signature fields.

verify-runtime <file>

Verifies the cryptographic signature of a runtime manifest.

pramanasystems-verifier-cli verify-runtime ./runtime-manifest.json

The runtime manifest must contain runtime, version, compatibility, and signature fields.

Unknown commands

Passing an unrecognised command name logs "Unknown command." and exits. There is no built-in help flag — refer to this README for the full command list.

Exit codes

| Code | Meaning | |---|---| | 0 | Verification succeeded | | 1 | Verification failed, file not found, or malformed input |

Example

$ pramanasystems-verifier-cli verify-attestation ./governance/attestation.json

PramanaSystems Verifier CLI

ATTESTATION:
{ decision: 'approve', policyVersion: 'v1', timestamp: '...', signature: '...' }

Cryptographic attestation verification succeeded.

License

Apache-2.0