WisentProbierz
Probierz/Docs

CLI command

probierz protect

Encrypt one run's artifact bundle at rest and optionally remove the plaintext source artifacts.

Invocation#

Shell
probierz protect [APP_ID] [RUN_ID] [KIND]

Required inputs and options#

  • `<appId>` and `<runId>` are required. `[kind]` optionally names the bundle kind.
  • A 32-byte encryption key is required through `--key-file <path>` or `PROBIERZ_ARTIFACT_ENCRYPTION_KEY_FILE`; `--remove-source` requests plaintext removal after protection succeeds.

Output and state effects#

Creates the protected bundle, records protection metadata, and writes the result as JSON. Plaintext is removed only when explicitly requested and after a successful bundle operation.

Exact refusals#

  • Missing identity: `protect needs an app ID and run ID`.
  • If present without a path, `--key-file` is refused as `--key-file needs a path`.
  • Missing runs, unsafe keys, secret-scan/persistence failures, or encryption errors propagate; source removal is not used as a fallback.

Source snapshot#

Generated from the Rust binaries at https://github.com/wisent-ai/probierz.git revision `f65b755da397f2ec7435eb80ed722aa6017437c1`.

Combined help SHA-256: `4a12655d233812abc29eeebbf3db3065efe3e00288024383f3eef3970d092e94`; binary SHA-256: `d5398832d3ab52c541b1efe979730dea62941ac6197898a20fccfc5d3fca44df`.