WisentProbierz
Probierz/Docs

CLI command

probierz protect

Encrypt one run's artifact bundle at rest and optionally remove the plaintext source artifacts.

Invocation#

Shell
probierz protect [APP_ID] [RUN_ID] [KIND]

Required inputs and options#

  • `<appId>` and `<runId>` are required. `[kind]` optionally names the bundle kind.
  • A 32-byte encryption key is required through `--key-file <path>` or `PROBIERZ_ARTIFACT_ENCRYPTION_KEY_FILE`; `--remove-source` requests plaintext removal after protection succeeds.

Output and state effects#

Creates the protected bundle, records protection metadata, and writes the result as JSON. Plaintext is removed only when explicitly requested and after a successful bundle operation.

Exact refusals#

  • Missing identity: `protect needs an app ID and run ID`.
  • If present without a path, `--key-file` is refused as `--key-file needs a path`.
  • Missing runs, unsafe keys, secret-scan/persistence failures, or encryption errors propagate; source removal is not used as a fallback.

Source snapshot#

Generated from the Rust binaries at https://github.com/wisent-ai/probierz.git revision `c589d6917201c31f57e6a7f24522c0d50ae5bd0f`.

Combined help SHA-256: `43f0d9cd136ac2c46ec3eedb2824bd5d6168f235dea4caaa50610c005f40c84a`; binary SHA-256: `7e42c843082863ed265817de90a110a2f27546426a54d372e10009fd665a4d8e`.