chio cert

chio cert

Generate, verify, and inspect ACP session compliance certificates.

chio cert [OPTIONS] <COMMAND>

• chio cert generate Generate a compliance certificate for an ACP session.
• chio cert verify Verify a compliance certificate.
• chio cert inspect Inspect a compliance certificate and display its contents.

chio cert generate

Generate a compliance certificate for an ACP session.

chio cert generate [OPTIONS] --session-id <SESSION_ID> --receipt-db <RECEIPT_DB>

• --session-id <SESSION_ID> ACP session ID to certify. Required.
• --receipt-db <RECEIPT_DB> Path to the receipt database. Required.
• --budget-limit <BUDGET_LIMIT> Maximum invocation budget (0 = unlimited). Default 0.
• --output <OUTPUT> Output file for the certificate JSON.

chio cert verify

Verify a compliance certificate.

chio cert verify [OPTIONS] --certificate <CERTIFICATE> --trusted-kernel-pubkey <PATH>

• --certificate <CERTIFICATE> Path to the certificate JSON file. Required.
• --trusted-kernel-pubkey <PATH> Trusted kernel public-key file used to verify the certificate signature. Raw 32-byte Ed25519 and algorithm-aware hex files are accepted. Required.
• --full Enable full-bundle verification (re-verify all receipt signatures).
• --receipt-db <RECEIPT_DB> Path to the receipt database (required for full-bundle mode).

chio cert inspect

Inspect a compliance certificate and display its contents.

chio cert inspect [OPTIONS] --certificate <CERTIFICATE>

• --certificate <CERTIFICATE> Path to the certificate JSON file. Required.