tenant-emit
v0.3.0
Published
The tenant-emit CLI: an emit-only toolkit that produces a factory's run-side governance certificate (build-certificate) with no trust handed to the producer beyond the operator key it signs with. Ships the prebuilt binary; no Rust toolchain required.
Downloads
497
Maintainers
Readme
tenant-emit (npm)
Prebuilt-binary npm distribution of the tenant-emit emit-only CLI. No Rust
toolchain required: npm i -D tenant-emit installs the matching
@tenant-emit/cli-<os>-<cpu> optional dependency and a thin launcher
(bin/tenant-emit.js) exec's it.
npm i -D tenant-emit
npx --no-install tenant-emit build-certificate <run-dir> --tenant-mode --signer-subject <s> --signer-identity-provider <p> [--corpus-attestation <att>] --require-operator-keyPin it as an exact-version devDependency next to spec-spine; npm ci verifies
the sha512 lockfile integrity of the package and its @tenant-emit/cli-*
subpackages. One pin covers the verb.
This wrapper mirrors spec-spine's npm/ shape exactly (launcher + platform
resolver + publish-time platform-package generator). The platform packages and
the binaries they carry are assembled from the release archives at publish time
and are never committed.
See the repo root README.md and OAP spec 220-tenant-emit-governance-certificate
for the toolkit's scope and status.
