chio federation

Produce and verify the authority and treaty artifacts two kernels exchange when their operators cooperate across organizations.

On this page

All command families · Global flags

chio federation

Produce and verify cross-kernel federation artifacts.

Command synopsistext

chio federation [OPTIONS] <COMMAND>

chio federation authority Produce local federation authority artifacts for offline verification.
chio federation treaty Verify treaty-bound cross-kernel provenance artifacts.
chio federation activation Check trust activation exchanges received from another operator.
chio federation quorum Verify signed anti-eclipse quorum reports.

chio federation authority

Produce local federation authority artifacts for offline verification.

Command synopsistext

chio federation authority [OPTIONS] <COMMAND>

chio federation authority issue Issue capability leases, lease-scope bindings, and governance receipts.
chio federation authority checkpoint Publish a signed revocation checkpoint from local authority state.
chio federation authority trust-bundle Assemble verifier-owned trust inputs.

chio federation authority issue

Issue capability leases, lease-scope bindings, and governance receipts.

Command synopsistext

chio federation authority issue [OPTIONS] --profile <PATH> --request <PATH> --signing-keys <PATH> --out-dir <DIR>

--profile <PATH> Public authority profile JSON. Required.
--request <PATH> Chio issuance request JSON. Required.
--signing-keys <PATH> Local signing-key JSON. Keep this outside committed fixtures. Required.
--out-dir <DIR> Output directory for the issuance bundle and split artifacts. Required.

chio federation authority checkpoint

Publish a signed revocation checkpoint from local authority state.

Command synopsistext

chio federation authority checkpoint [OPTIONS] --profile <PATH> --revocations <PATH> --signing-keys <PATH> --out <PATH>

--profile <PATH> Public authority profile JSON. Required.
--revocations <PATH> Revocation publication request JSON. Required.
--signing-keys <PATH> Local signing-key JSON. Keep this outside committed fixtures. Required.
--out <PATH> Output path for the signed checkpoint JSON. Required.

chio federation authority trust-bundle

Assemble verifier-owned trust inputs.

Command synopsistext

chio federation authority trust-bundle [OPTIONS] <COMMAND>

chio federation authority trust-bundle assemble

Assemble a strict verifier trust bundle.

Command synopsistext

chio federation authority trust-bundle assemble [OPTIONS] --profile <PATH> --peer-pins <PATH> --workflow-intersection <PATH> --disclosure-policy <PATH> --checkpoint <PATH> --out <PATH>

--profile <PATH> Public authority profile JSON. Required.
--peer-pins <PATH> Verifier-owned peer, vendor, and action-class pins JSON. Required.
--workflow-intersection <PATH> Workflow intersection artifact JSON. Required.
--disclosure-policy <PATH> Disclosure policy JSON. Required.
--checkpoint <PATH> Signed revocation checkpoint JSON. Required.
--out <PATH> Output path for the verifier trust bundle JSON. Required.

chio federation treaty

Verify treaty-bound cross-kernel provenance artifacts.

Command synopsistext

chio federation treaty [OPTIONS] <COMMAND>

chio federation treaty intersect Compute a local ladder intersection from verifier-owned treaty inputs.
chio federation treaty admit Evaluate treaty-bound cross-boundary admission evidence.
chio federation treaty verify-packet Verify a buyer packet against receipt-lineage evidence.
chio federation treaty revoke Revoke a treaty, revoking every grant issued under it and sending the revocation root to the partner.

chio federation treaty intersect

Compute a local ladder intersection from verifier-owned treaty inputs.

Command synopsistext

chio federation treaty intersect [OPTIONS] --treaty-scope <PATH> --now-unix-ms <NOW_UNIX_MS> --report <PATH>

--treaty-scope <PATH> Treaty scope JSON. Required.
--manifest <PATH> Governance ladder manifest JSON. Pass once per participant.
--now-unix-ms <NOW_UNIX_MS> Intersection generation time in Unix milliseconds. Required.
--report <PATH> Output path for ladder intersection JSON. Required.

chio federation treaty admit

Evaluate treaty-bound cross-boundary admission evidence.

Command synopsistext

chio federation treaty admit [OPTIONS] --treaty-scope <PATH> --ladder-intersection <PATH> --expected-ladder-intersection-sha256 <EXPECTED_LADDER_INTERSECTION_SHA256> --action-class-id <ACTION_CLASS_ID> --now-unix-ms <NOW_UNIX_MS> --report <PATH>

--treaty-scope <PATH> Treaty scope JSON. Required.
--ladder-intersection <PATH> Ladder intersection JSON. Required.
--expected-ladder-intersection-sha256 <EXPECTED_LADDER_INTERSECTION_SHA256> Expected ladder intersection SHA-256 from verifier-owned computation. Required.
--action-class-id <ACTION_CLASS_ID> Action class id to admit. Required.
--evidence <EVIDENCE> Verified evidence ref as evidence_class=artifact_sha256. Pass once per item.
--now-unix-ms <NOW_UNIX_MS> Admission evaluation time in Unix milliseconds. Required.
--report <PATH> Output path for cross-boundary admission report JSON. Required.

chio federation treaty verify-packet

Verify a buyer packet against receipt-lineage evidence.

Command synopsistext

chio federation treaty verify-packet [OPTIONS] --packet <PATH> --lineage-statement <PATH> --continuation <PATH> --admission-report <PATH> --bilateral-invocation <PATH> --report <PATH>

--packet <PATH> Buyer attestation packet JSON. Required.
--lineage-statement <PATH> Receipt lineage statement JSON. Required.
--continuation <PATH> Cross-kernel continuation JSON. Required.
--admission-report <PATH> Cross-boundary admission report JSON. Required.
--bilateral-invocation <PATH> Bilateral invocation JSON. Required.
--report <PATH> Output path for buyer attestation verification report JSON. Required.

chio federation treaty revoke

Revoke a treaty, revoking every grant issued under it and sending the revocation root to the partner.

Command synopsistext

chio federation treaty revoke [OPTIONS] --treaty <ID>

--treaty <ID> Treaty id. Required.

chio federation activation

Check trust activation exchanges received from another operator.

Command synopsistext

chio federation activation [OPTIONS] <COMMAND>

chio federation activation verify

Validate a received trust activation exchange (schema, import controls, and delegation controls) before it goes to local review.

Command synopsistext

chio federation activation verify [OPTIONS] --exchange <PATH>

--exchange <PATH> Activation exchange document. Required.

chio federation quorum

Verify signed anti-eclipse quorum reports.

Command synopsistext

chio federation quorum [OPTIONS] <COMMAND>

chio federation quorum verify

Verify signed quorum reports against a pinned signer and apply your own anti-eclipse floor.

Command synopsistext

chio federation quorum verify [OPTIONS] --trusted-signer <KEY> <PATH>...

<PATH>... Signed quorum report files. Required.
--trusted-signer <KEY> Quorum report signer key to trust. Repeat for several signers. Required.
--floor <PATH> Anti-eclipse floor file (minimum operators, threshold, maximum age).

Additional behavior

The floor sets the minimum number of independent operators, the agreement threshold, and the maximum report age; every report must agree on the same listing digest.