CLI command

probierz verify-receipt

Verify a receipt's payload hash, Ed25519 signature, trust, and optional expected public-key fingerprint.

Invocation#

Shell
probierz verify-receipt [FILE]

Required inputs and options#

  • `<file>` is required. `--public-key` supplies an explicit trusted key; `--fingerprint` supplies the expected fingerprint.

Output and state effects#

Writes verification details as JSON. If `valid` is false, the command sets exit code 1 and does not modify the receipt.

Exact refusals#

  • Missing file: `verify-receipt needs a file`.
  • Missing/unsupported signatures, non-Ed25519 keys, malformed receipts, hash mismatch, and trust/fingerprint mismatch cannot produce `valid: true`.

Source snapshot#

Generated from the Rust binaries at https://github.com/wisent-ai/probierz.git revision `c589d6917201c31f57e6a7f24522c0d50ae5bd0f`.

Combined help SHA-256: `43f0d9cd136ac2c46ec3eedb2824bd5d6168f235dea4caaa50610c005f40c84a`; binary SHA-256: `7e42c843082863ed265817de90a110a2f27546426a54d372e10009fd665a4d8e`.