WisentProbierz
Probierz/Docs

CLI command

probierz publication

Emit an immutable verified first-use publication manifest from a signed receipt and explicit asset catalog. The journey's version, version ID, first-success fact and screen are read from the signed run and checked against the app manifest; this is the one command that writes a probierz-first-use-publication manifest.

Invocation#

Shell
probierz publication [RECEIPT] [ATTEMPT_ID] [JOURNEY_ID]

Required inputs and options#

  • Receipt file, attempt ID, journey ID, and `--assets <json>` are required.
  • `--public-key` or `--fingerprint` may pin receipt trust.

Output and state effects#

Verifies the receipt and asset bindings, then writes the publication manifest as JSON. It does not upload or publish the assets itself.

Exact refusals#

  • Missing core values: `publication needs receipt, attemptId, journeyId, and --assets <json>`.
  • Every publication invariant is fail-closed with `publication rejected: …`, including receipt trust, passing evidence, source/build identity, asset hashes, timestamps, redaction, and journey coverage.
  • The run's evidence level is ranked against the journey policy's `minimumEvidence` by the number an `E<n>` level carries: a policy that states no minimum is refused with `the journey's publication policy states no minimumEvidence`, one that is not an `E<n>` level with `unsupported minimum evidence level …`, and a run below it with `… is below …`.

Source snapshot#

Generated from the Rust binaries at https://github.com/wisent-ai/probierz.git revision `f65b755da397f2ec7435eb80ed722aa6017437c1`.

Combined help SHA-256: `4a12655d233812abc29eeebbf3db3065efe3e00288024383f3eef3970d092e94`; binary SHA-256: `d5398832d3ab52c541b1efe979730dea62941ac6197898a20fccfc5d3fca44df`.