CLI command

probierz receipt

Validate selected evidence against exact source identities and sign one release receipt.

Invocation#

Shell
probierz receipt [APP_ID] [RELEASE] [EXPECTED_HARNESS_SHA]

Required inputs and options#

  • Application ID, release ID, lowercase harness SHA-256, lowercase source SHA-256, and at least one run ID are required.
  • `--minimum` defaults to `E3`; `--journeys` constrains required journey coverage. Signing uses `PROBIERZ_RECEIPT_PRIVATE_KEY_FILE`.

Output and state effects#

Writes a signed Ed25519 evidence receipt and returns its result as JSON. A receipt whose evidence verdict does not pass sets exit code 1.

Exact refusals#

  • Missing core fields: `appId, release, expectedHarnessSha, and expectedSourceSha are required`; invalid hashes and an empty run list are refused.
  • Unknown evidence levels and missing/non-Ed25519 signing keys are refused.
  • Source mismatch, missing journey/build/artifact evidence, or insufficient evidence level yields a non-passing receipt verdict, never an approval.

Source snapshot#

Generated from the Rust binaries at https://github.com/wisent-ai/probierz.git revision `c589d6917201c31f57e6a7f24522c0d50ae5bd0f`.

Combined help SHA-256: `43f0d9cd136ac2c46ec3eedb2824bd5d6168f235dea4caaa50610c005f40c84a`; binary SHA-256: `7e42c843082863ed265817de90a110a2f27546426a54d372e10009fd665a4d8e`.