chio certify

chio certify

Evaluate a conformance corpus and emit a signed certification artifact.

chio certify [OPTIONS] <COMMAND>

• chio certify check Evaluate conformance evidence and emit a signed pass/fail certification artifact.
• chio certify verify Verify a signed certification artifact.
• chio certify registry Publish, resolve, and revoke certification artifacts in a registry.

chio certify check

Evaluate conformance evidence and emit a signed pass/fail certification artifact.

chio certify check [OPTIONS] --scenarios-dir <SCENARIOS_DIR> --results-dir <RESULTS_DIR> --output <OUTPUT> --tool-server-id <TOOL_SERVER_ID> --signing-seed-file <SIGNING_SEED_FILE>

• --scenarios-dir <SCENARIOS_DIR> Directory containing conformance scenario descriptor JSON files. Required.
• --results-dir <RESULTS_DIR> Directory containing conformance result JSON files. Required.
• --output <OUTPUT> Output path for the signed certification artifact JSON. Required.
• --tool-server-id <TOOL_SERVER_ID> Stable identifier for the tool server being checked. Required.
• --tool-server-name <TOOL_SERVER_NAME> Optional human-readable name for the tool server being checked.
• --report-output <REPORT_OUTPUT> Optional path to write a generated markdown report for the evaluated corpus.
• --criteria-profile <CRITERIA_PROFILE> Certification criteria profile to apply. Default conformance-all-pass-v1.
• --signing-seed-file <SIGNING_SEED_FILE> Persistent seed file used to sign certification artifacts. Required.

chio certify verify

Verify a signed certification artifact.

chio certify verify [OPTIONS] --input <INPUT>

• --input <INPUT> Input path for the signed certification artifact JSON. Required.

chio certify registry

Publish, resolve, and revoke certification artifacts in a registry.

chio certify registry [OPTIONS] <COMMAND>

• chio certify registry publish Publish one signed certification artifact into a local or remote registry.
• chio certify registry publish-network Publish one certification artifact across configured discovery-network operators.
• chio certify registry list List certification artifacts from a local or remote registry.
• chio certify registry get Read one certification artifact from a local or remote registry.
• chio certify registry resolve Resolve the current certification status for one tool server.
• chio certify registry discover Discover certification status across multiple configured operators.
• chio certify registry search Search public certification listings across configured operators.
• chio certify registry transparency Render the public certification transparency feed across configured operators.
• chio certify registry consume Evaluate public certification listings against a local import policy.
• chio certify registry revoke Revoke one certification artifact in a local or remote registry.
• chio certify registry dispute Open or resolve a public certification dispute record.

chio certify registry publish

Publish one signed certification artifact into a local or remote registry.

chio certify registry publish [OPTIONS] --input <INPUT>

• --input <INPUT> Input path for the signed certification artifact JSON. Required.
• --certification-registry-file <CERTIFICATION_REGISTRY_FILE> Local registry file to update when not using --control-url.

chio certify registry publish-network

Publish one certification artifact across configured discovery-network operators.

chio certify registry publish-network [OPTIONS] --input <INPUT>

• --input <INPUT> Input path for the signed certification artifact JSON. Required.
• --certification-discovery-file <CERTIFICATION_DISCOVERY_FILE> Local discovery-network file to use when not using --control-url.
• --operator-id <OPERATOR_IDS> Optional operator id allowlist. Repeat to target specific operators.

chio certify registry list

List certification artifacts from a local or remote registry.

chio certify registry list [OPTIONS]

• --certification-registry-file <CERTIFICATION_REGISTRY_FILE> Local registry file to inspect when not using --control-url.

chio certify registry get

Read one certification artifact from a local or remote registry.

chio certify registry get [OPTIONS] --artifact-id <ARTIFACT_ID>

• --artifact-id <ARTIFACT_ID> Certification artifact ID to fetch. Required.
• --certification-registry-file <CERTIFICATION_REGISTRY_FILE> Local registry file to inspect when not using --control-url.

chio certify registry resolve

Resolve the current certification status for one tool server.

chio certify registry resolve [OPTIONS] --tool-server-id <TOOL_SERVER_ID>

• --tool-server-id <TOOL_SERVER_ID> Stable tool-server identifier whose current certification should be resolved. Required.
• --certification-registry-file <CERTIFICATION_REGISTRY_FILE> Local registry file to inspect when not using --control-url.

chio certify registry discover

Discover certification status across multiple configured operators.

chio certify registry discover [OPTIONS] --tool-server-id <TOOL_SERVER_ID>

• --tool-server-id <TOOL_SERVER_ID> Stable tool-server identifier whose discovery state should be queried. Required.
• --certification-discovery-file <CERTIFICATION_DISCOVERY_FILE> Local discovery-network file to use when not using --control-url.

chio certify registry search

Search public certification listings across configured operators.

chio certify registry search [OPTIONS]

• --certification-discovery-file <CERTIFICATION_DISCOVERY_FILE> Optional local discovery-network file to use when not using --control-url.
• --tool-server-id <TOOL_SERVER_ID> Optional exact tool-server id filter.
• --criteria-profile <CRITERIA_PROFILE> Optional criteria profile filter.
• --evidence-profile <EVIDENCE_PROFILE> Optional evidence profile filter.
• --status <STATUS> Optional listing state filter (active, superseded, or revoked).
• --operator-id <OPERATOR_IDS> Optional operator id allowlist. Repeat to target specific operators.

chio certify registry transparency

Render the public certification transparency feed across configured operators.

chio certify registry transparency [OPTIONS]

• --certification-discovery-file <CERTIFICATION_DISCOVERY_FILE> Optional local discovery-network file to use when not using --control-url.
• --tool-server-id <TOOL_SERVER_ID> Optional exact tool-server id filter.
• --operator-id <OPERATOR_IDS> Optional operator id allowlist. Repeat to target specific operators.

chio certify registry consume

Evaluate public certification listings against a local import policy.

chio certify registry consume [OPTIONS] --tool-server-id <TOOL_SERVER_ID>

• --tool-server-id <TOOL_SERVER_ID> Stable tool-server identifier whose public listing should be consumed. Required.
• --certification-discovery-file <CERTIFICATION_DISCOVERY_FILE> Optional local discovery-network file to use when not using --control-url.
• --operator-id <OPERATOR_IDS> Optional operator id allowlist. Repeat to target specific operators.
• --criteria-profile <ALLOWED_CRITERIA_PROFILES> Optional allowed criteria profile. Repeat to allow multiple profiles.
• --evidence-profile <ALLOWED_EVIDENCE_PROFILES> Optional allowed evidence profile. Repeat to allow multiple profiles.

chio certify registry revoke

Revoke one certification artifact in a local or remote registry.

chio certify registry revoke [OPTIONS] --artifact-id <ARTIFACT_ID>

• --artifact-id <ARTIFACT_ID> Certification artifact ID to revoke. Required.
• --reason <REASON> Optional human-readable revocation reason.
• --revoked-at <REVOKED_AT> Optional revocation timestamp override in Unix seconds. Defaults to now.
• --certification-registry-file <CERTIFICATION_REGISTRY_FILE> Local registry file to update when not using --control-url.

chio certify registry dispute

Open or resolve a public certification dispute record.

chio certify registry dispute [OPTIONS] --artifact-id <ARTIFACT_ID> --state <STATE>

• --artifact-id <ARTIFACT_ID> Certification artifact ID to update. Required.
• --state <STATE> Dispute state (open, under-review, resolved-no-change, resolved-revoked). Required.
• --note <NOTE> Optional dispute note or resolution summary.
• --updated-at <UPDATED_AT> Optional dispute timestamp override in Unix seconds. Defaults to now.
• --certification-registry-file <CERTIFICATION_REGISTRY_FILE> Local registry file to update when not using --control-url.