chio process

Host durable agent processes whose identity, authority, and checkpoints survive worker restarts, then attest and verify their calls and runs.

On this page

All command families · Global flags

chio process

Host durable agent processes backed by MCP tool servers.

Command synopsistext

chio process [OPTIONS] <COMMAND>

chio process init Initialize an empty private state directory from a host configuration.
chio process serve Serve authenticated workers until SIGINT or SIGTERM, then drain calls.
chio process run Run a declared worker application with persistent, bounded restart attempts (Linux).
chio process status Read the last native-runner snapshot while the host is running or stopped.
chio process state Read retained application state without launching tools or issuing credentials.
chio process logs Read bounded, private stdout and stderr logs from a retained worker attempt.
chio process credential Issue a private connection descriptor while the host is stopped.
chio process revoke Revoke a process’s worker credentials while the host is stopped.
chio process revoke-capability Permanently revoke the issued capability and its descendants while the host is stopped.
chio process cancel Permanently cancel a process subtree while the host is stopped.
chio process export Retire the stopped host where it is and write the manifest that lets a copy be imported elsewhere.
chio process import Re-anchor a copied host state directory at its new location and verify it against its manifest.
chio process attest-call Observe one retained call and its continuation custody while the host is stopped (Linux).
chio process verify-call Verify a retained call observation without opening host state.
chio process attest-run Attest completed fixed fan-out results and the retained aggregate usage (Linux).
chio process verify-run Verify completed fan-out evidence against operator pins.
chio process attest-outcomes Observe finished workers, issued graphs, call outcomes, and durable family usage (Linux).
chio process verify-outcomes Verify worker outcomes and their issued authority without opening host state.
chio process qualify Run the confined-swarm qualification matrix on this Linux host and verify a matrix another operator ran.
chio process prepare-broker-call Sign one provider request with the host’s retained process proof key.

Example

Initialize a host from its configuration, run the declared worker application, and read the runner snapshot.

Terminalbash

chio process init --config host.json --state .chio
chio process run --state .chio --plan process.json
chio process status --state .chio

chio process init

Initialize an empty private state directory from a host configuration.

Command synopsistext

chio process init [OPTIONS] --config <CONFIG> --state <STATE>

--config <CONFIG> Host configuration file. Required.
--state <STATE> Private host state directory. Required.
--local-tools Discover and authorize the configured local tools. Starts their commands; provides no OS confinement.
--aggregate-invocations <AGGREGATE_INVOCATIONS> Signed invocation budget shared by the root and all descendants.
--swarm-plan <SWARM_PLAN> Bind a bounded fan-out plan to this host’s issued capabilities. Requires --aggregate-invocations.

chio process serve

Serve authenticated workers until SIGINT or SIGTERM, then drain calls.

Command synopsistext

chio process serve [OPTIONS] --state <STATE> --socket <SOCKET>

--state <STATE> Private host state directory. Required.
--socket <SOCKET> Socket in a separate private directory exposed to worker sandboxes. Required.

chio process run

Run a declared worker application with persistent, bounded restart attempts (Linux).

Command synopsistext

chio process run [OPTIONS] --state <STATE> --plan <PLAN>

--state <STATE> Private host state directory. Required.
--plan <PLAN> Worker application plan. Required.

chio process status

Read the last native-runner snapshot while the host is running or stopped.

Command synopsistext

chio process status [OPTIONS] --state <STATE>

--state <STATE> Private host state directory. Required.

chio process state

Read retained application state without launching tools or issuing credentials.

Command synopsistext

chio process state [OPTIONS] --state <STATE> --process <PROCESS>

--state <STATE> Private host state directory. Required.
--process <PROCESS> Process name from the host configuration. Required.
--blob <BLOB> Read one immutable blob instead of the checkpoint.

chio process logs

Read bounded, private stdout and stderr logs from a retained worker attempt.

Command synopsistext

chio process logs [OPTIONS] --state <STATE> --process <PROCESS> --attempt <ATTEMPT>

--state <STATE> Private host state directory. Required.
--process <PROCESS> Process name from the host configuration. Required.
--attempt <ATTEMPT> Worker attempt number. Required.

chio process credential

Issue a private connection descriptor while the host is stopped.

Command synopsistext

chio process credential [OPTIONS] --state <STATE> --process <PROCESS> --socket <SOCKET> --out <OUT>

--state <STATE> Private host state directory. Required.
--process <PROCESS> Process name from the host configuration. Required.
--socket <SOCKET> Worker socket the descriptor connects to. Required.
--out <OUT> New file in a private directory. Existing files are never replaced. Required.

chio process revoke

Revoke a process’s worker credentials while the host is stopped.

Command synopsistext

chio process revoke [OPTIONS] --state <STATE> --process <PROCESS>

--state <STATE> Private host state directory. Required.
--process <PROCESS> Process name from the host configuration. Required.

chio process revoke-capability

Permanently revoke the issued capability and its descendants while the host is stopped.

Command synopsistext

chio process revoke-capability [OPTIONS] --state <STATE> --process <PROCESS>

--state <STATE> Private host state directory. Required.
--process <PROCESS> Process name from the host configuration. Required.

chio process cancel

Permanently cancel a process subtree while the host is stopped.

Command synopsistext

chio process cancel [OPTIONS] --state <STATE> --process <PROCESS>

--state <STATE> Private host state directory. Required.
--process <PROCESS> Process name from the host configuration. Required.

chio process export

Retire the stopped host where it is and write the manifest that lets a copy be imported elsewhere.

Command synopsistext

chio process export [OPTIONS] --state <STATE>

--state <STATE> Private host state directory. Required.

chio process import

Re-anchor a copied host state directory at its new location and verify it against its manifest.

Command synopsistext

chio process import [OPTIONS] --state <STATE>

--state <STATE> Private host state directory. Required.

chio process attest-call

Observe one retained call and its continuation custody while the host is stopped (Linux).

Command synopsistext

chio process attest-call [OPTIONS] --state <STATE> --request <REQUEST> --context <CONTEXT> --response <RESPONSE> --out <OUT>

--state <STATE> Private host state directory. Required.
--request <REQUEST> Original caller request. Required.
--context <CONTEXT> Runtime, process, and capability context of the call. Required.
--response <RESPONSE> Response the caller received. Required.
--out <OUT> Call attestation artifact. Required.

chio process verify-call

Verify a retained call observation without opening host state.

Command synopsistext

chio process verify-call [OPTIONS] --artifact <ARTIFACT> --trusted-kernel-pubkey <TRUSTED_KERNEL_PUBKEY> --runtime-id <RUNTIME_ID> --request <REQUEST> --context <CONTEXT>

--artifact <ARTIFACT> Attestation artifact written by the matching attest command. Required.
--trusted-kernel-pubkey <TRUSTED_KERNEL_PUBKEY> Kernel public key the verifier pins. Required.
--runtime-id <RUNTIME_ID> Runtime identifier the artifact must name. Required.
--request <REQUEST> Original caller request, independently retained by the verifier. Required.
--context <CONTEXT> Original runtime, process, and capability context, independently retained. Required.
--trusted-launch-policy-signer <TRUSTED_LAUNCH_POLICY_SIGNER> External operator pin for each native server, repeated as SERVER=PUBLIC_KEY.
--trusted-broker-host-config <TRUSTED_BROKER_HOST_CONFIG> Independently retained, normalized host config for brokered calls.
--trusted-keylog-verifier <TRUSTED_KEYLOG_VERIFIER> Independently synchronized verifier for governed parent issuance.

chio process attest-run

Attest completed fixed fan-out results and the retained aggregate usage (Linux).

Command synopsistext

chio process attest-run [OPTIONS] --state <STATE> --plan <PLAN> --out <OUT>

--state <STATE> Private host state directory. Required.
--plan <PLAN> Worker application plan. Required.
--out <OUT> Run attestation artifact. Required.

chio process verify-run

Verify completed fan-out evidence against operator pins.

Command synopsistext

chio process verify-run [OPTIONS] --artifact <ARTIFACT> --trusted-kernel-pubkey <TRUSTED_KERNEL_PUBKEY> --runtime-id <RUNTIME_ID>

--artifact <ARTIFACT> Attestation artifact written by the matching attest command. Required.
--trusted-kernel-pubkey <TRUSTED_KERNEL_PUBKEY> Kernel public key the verifier pins. Required.
--runtime-id <RUNTIME_ID> Runtime identifier the artifact must name. Required.
--trusted-launch-policy-signer <TRUSTED_LAUNCH_POLICY_SIGNER> External operator pin for each native server, repeated as SERVER=PUBLIC_KEY.

chio process attest-outcomes

Observe finished workers, issued graphs, call outcomes, and durable family usage (Linux).

Command synopsistext

chio process attest-outcomes [OPTIONS] --state <STATE> --plan <PLAN> --out <OUT>

--state <STATE> Private host state directory. Required.
--plan <PLAN> Worker application plan. Required.
--out <OUT> Outcome attestation artifact. Required.

chio process verify-outcomes

Verify worker outcomes and their issued authority without opening host state.

Command synopsistext

chio process verify-outcomes [OPTIONS] --artifact <ARTIFACT> --trusted-kernel-pubkey <TRUSTED_KERNEL_PUBKEY> --runtime-id <RUNTIME_ID>

--artifact <ARTIFACT> Attestation artifact written by the matching attest command. Required.
--trusted-kernel-pubkey <TRUSTED_KERNEL_PUBKEY> Kernel public key the verifier pins. Required.
--runtime-id <RUNTIME_ID> Runtime identifier the artifact must name. Required.
--trusted-launch-policy-signer <TRUSTED_LAUNCH_POLICY_SIGNER> External operator pin for each native server, repeated as SERVER=PUBLIC_KEY.

chio process qualify

Run the confined-swarm qualification matrix on this Linux host and verify a matrix another operator ran.

Command synopsistext

chio process qualify [OPTIONS] <COMMAND>

chio process qualify run Run the seven qualification scenarios: two under the cage, five with confined tools and worker containers supervised by chio process run.
chio process qualify verify Verify a received matrix artifact against independently held operator pins, without opening the host’s state.
chio process qualify test-evidence Check that every scenario in a verified matrix carries the test evidence its decision rests on.

chio process qualify run

Run the seven qualification scenarios: two under the cage, five with confined tools and worker containers supervised by chio process run.

Command synopsistext

chio process qualify run [OPTIONS] --cage-init <PATH> --probe <PATH> --reader <PATH> --worker-image <IMAGE> --output <DIR> --receipt-rollback-anchor-root <PATH>

--cage-init <PATH> Static chio-cage-init helper the confined scenarios launch under. Required.
--probe <PATH> Enforcement probe binary the cage scenarios run. Required.
--reader <PATH> Confined repository reader tool the worker scenarios call. Required.
--worker-image <IMAGE> Worker container image, by sha256: image id. Required.
--output <DIR> New directory for the matrix artifact and its evidence. Required.
--receipt-rollback-anchor-root <PATH> Private receipt rollback anchor directory on a different filesystem from the receipt database. Required.

Additional behavior

Writes the matrix artifact, per-scenario logs, and a SHA-256 manifest. Linux only. Exit 0 when every scenario produced its expected decision, 1 when any did not.

chio process qualify verify

Verify a received matrix artifact against independently held operator pins, without opening the host’s state.

Command synopsistext

chio process qualify verify [OPTIONS] --artifact <PATH> --trusted-pins <PATH>

--artifact <PATH> Matrix artifact to verify. Required.
--trusted-pins <PATH> Operator pins obtained independently of the artifact: kernel key, runtime id, and launch signer. Required.

chio process qualify test-evidence

Check that every scenario in a verified matrix carries the test evidence its decision rests on.

Command synopsistext

chio process qualify test-evidence [OPTIONS] --artifact <PATH> --trusted-pins <PATH>

--artifact <PATH> Matrix artifact to check. Required.
--trusted-pins <PATH> Operator pins obtained independently of the artifact. Required.

chio process prepare-broker-call

Sign one provider request with the host’s retained process proof key.

Command synopsistext

chio process prepare-broker-call [OPTIONS] --state <STATE> --process <PROCESS> --operation-key <OPERATION_KEY> --capability <CAPABILITY> --request <REQUEST> --out <OUT>

--state <STATE> Private host state directory. Required.
--process <PROCESS> Process name from the host configuration. Required.
--operation-key <OPERATION_KEY> Operation key that names the call. Required.
--capability <CAPABILITY> Capability token the call is made under. Required.
--request <REQUEST> Provider request to sign. Required.
--out <OUT> Signed broker request. Required.