Chio/Docs
LOGIN · JOIN

chio trust

Pin the keys your verifiers trust, run the trust control plane for your operator domain, and manage revocation and federated issuance.

Reference chio@5f63e6e

On this page

All command families · Global flags

chio trust

Manage local trust-plane state such as persisted revocations.

Command synopsistext
chio trust [OPTIONS] <COMMAND>

chio trust serve

Serve the shared trust-control plane over HTTP.

Command synopsistext
chio trust serve [OPTIONS] --service-token <SERVICE_TOKEN>
  • --listen <LISTEN> Socket address to bind the trust-control service to. Default 127.0.0.1:8940.
  • --service-token <SERVICE_TOKEN> Bearer token required for trust-control service requests. Prefer CHIO_TRUST_SERVICE_TOKEN over --service-token so the secret is not visible to other users via ps//proc. Required. Reads CHIO_TRUST_SERVICE_TOKEN.
  • --tenant-read-token <TENANT=TOKEN> Tenant-scoped read token mapping in tenant_id=token form. Repeat for multiple tenants. Requests presenting one of these tokens are confined to reading the matching tenant’s receipts; the --service-token retains administrative cross-tenant access.
  • --advertise-url <ADVERTISE_URL> Public base URL this trust-control node advertises to peers and clients.
  • --peer-url <PEER_URLS> Peer trust-control base URL. Repeat for multiple peers.
  • --allow-local-peer-urls Allow loopback/private cluster peer URLs for local development only.
  • --cluster-sync-interval-ms <CLUSTER_SYNC_INTERVAL_MS> Background cluster sync interval in milliseconds. Default 500.
  • --policy <POLICY> Optional policy file whose reputation issuance extension is enforced by the service.
  • --enterprise-providers-file <ENTERPRISE_PROVIDERS_FILE> Optional file-backed enterprise provider registry shared with remote MCP edges.
  • --federation-policies-file <FEDERATION_POLICIES_FILE> Optional file-backed permissionless federation policy registry.
  • --scim-lifecycle-file <SCIM_LIFECYCLE_FILE> Optional file-backed SCIM lifecycle registry for external IdP provisioning and deprovisioning.
  • --verifier-policies-file <VERIFIER_POLICIES_FILE> Optional file-backed signed verifier policy registry for remote verifier flows.
  • --verifier-challenge-db <VERIFIER_CHALLENGE_DB> Optional SQLite verifier challenge-state database for replay-safe remote verifier flows.
  • --passport-statuses-file <PASSPORT_STATUSES_FILE> Optional file-backed passport lifecycle registry for publish/resolve/revoke flows.
  • --passport-issuance-offers-file <PASSPORT_ISSUANCE_OFFERS_FILE> Optional file-backed passport issuance registry for OID4VCI-style pre-authorized offers.
  • --certification-registry-file <CERTIFICATION_REGISTRY_FILE> Optional file-backed certification registry for publish/resolve/revoke flows.
  • --certification-discovery-file <CERTIFICATION_DISCOVERY_FILE> Optional multi-operator certification discovery network file.
  • --fiscal-genesis-policy <FISCAL_GENESIS_POLICY> Pinned fiscal genesis policy JSON loaded before the service binds.
  • --fiscal-anchor-url <FISCAL_ANCHOR_URL> Independent HTTPS fiscal continuity anchor base URL.
  • --fiscal-anchor-token <FISCAL_ANCHOR_TOKEN> Bearer token for the independent fiscal continuity anchor. Reads CHIO_FISCAL_ANCHOR_TOKEN.
  • --fiscal-admission-authority-id <FISCAL_ADMISSION_AUTHORITY_ID> Stable identifier for the local durable fiscal admission authority. Default fiscal-admission.
  • --fiscal-admission-signer-key-epoch <FISCAL_ADMISSION_SIGNER_KEY_EPOCH> Monotonic key epoch for the fiscal admission signing key. Default 1.
  • --fiscal-admission-signing-seed <FISCAL_ADMISSION_SIGNING_SEED> Existing private seed file used to sign durable fiscal admissions.
  • --fiscal-anchor-timeout-seconds <FISCAL_ANCHOR_TIMEOUT_SECONDS> Fiscal continuity anchor request timeout in seconds. Default 5.
  • --certification-public-metadata-ttl-seconds <CERTIFICATION_PUBLIC_METADATA_TTL_SECONDS> Public certification metadata TTL in seconds. Default 3600.
  • --roster-policy-file <ROSTER_POLICY_FILE> JSON file containing the operator roster policy (roster, allowed decision rules, roster anchor) for liability adjudication enforcement.
  • --trust <FILE> Trust file whose issuer and receipt-kernel pins the service accepts. Defaults to ~/.chio/trust.toml. Reads CHIO_TRUST.

chio trust provider

Manage enterprise federation provider-admin records.

Command synopsistext
chio trust provider [OPTIONS] <COMMAND>

chio trust provider list

List enterprise provider records from the shared registry.

Command synopsistext
chio trust provider list [OPTIONS]
  • --enterprise-providers-file <ENTERPRISE_PROVIDERS_FILE> Local registry file to inspect when not using --control-url.

chio trust provider get

Read one enterprise provider record.

Command synopsistext
chio trust provider get [OPTIONS] --provider-id <PROVIDER_ID>
  • --provider-id <PROVIDER_ID> Provider ID to fetch. Required.
  • --enterprise-providers-file <ENTERPRISE_PROVIDERS_FILE> Local registry file to inspect when not using --control-url.

chio trust provider upsert

Create or update one enterprise provider record from JSON.

Command synopsistext
chio trust provider upsert [OPTIONS] --input <INPUT>
  • --input <INPUT> Input JSON file containing an EnterpriseProviderRecord. Required.
  • --enterprise-providers-file <ENTERPRISE_PROVIDERS_FILE> Local registry file to update when not using --control-url.

chio trust provider delete

Delete one enterprise provider record.

Command synopsistext
chio trust provider delete [OPTIONS] --provider-id <PROVIDER_ID>
  • --provider-id <PROVIDER_ID> Provider ID to delete. Required.
  • --enterprise-providers-file <ENTERPRISE_PROVIDERS_FILE> Local registry file to update when not using --control-url.

chio trust federation-policy

Manage permissionless federation admission policies.

Command synopsistext
chio trust federation-policy [OPTIONS] <COMMAND>

chio trust federation-policy list

List published permissionless federation policies.

Command synopsistext
chio trust federation-policy list [OPTIONS]
  • --federation-policies-file <FEDERATION_POLICIES_FILE> Local registry file to inspect when not using --control-url.

chio trust federation-policy get

Read one published permissionless federation policy.

Command synopsistext
chio trust federation-policy get [OPTIONS] --policy-id <POLICY_ID>
  • --policy-id <POLICY_ID> Policy ID to fetch. Required.
  • --federation-policies-file <FEDERATION_POLICIES_FILE> Local registry file to inspect when not using --control-url.

chio trust federation-policy upsert

Create or update one permissionless federation policy record from JSON.

Command synopsistext
chio trust federation-policy upsert [OPTIONS] --input <INPUT>
  • --input <INPUT> Input JSON file containing a FederationAdmissionPolicyRecord. Required.
  • --federation-policies-file <FEDERATION_POLICIES_FILE> Local registry file to update when not using --control-url.

chio trust federation-policy delete

Delete one permissionless federation policy record.

Command synopsistext
chio trust federation-policy delete [OPTIONS] --policy-id <POLICY_ID>
  • --policy-id <POLICY_ID> Policy ID to delete. Required.
  • --federation-policies-file <FEDERATION_POLICIES_FILE> Local registry file to update when not using --control-url.

chio trust federation-policy evaluate

Evaluate admission for one peer under a published federation policy.

Command synopsistext
chio trust federation-policy evaluate [OPTIONS] --input <INPUT>
  • --input <INPUT> Input JSON file containing a FederationAdmissionEvaluationRequest. Required.

chio trust evidence-share

Inspect shared remote evidence references used by local delegated activity.

Command synopsistext
chio trust evidence-share [OPTIONS] <COMMAND>

chio trust evidence-share list

List shared-evidence references visible from local activity or the remote trust service.

Command synopsistext
chio trust evidence-share list [OPTIONS]
  • --capability <CAPABILITY> Filter by local capability ID.
  • --agent-subject <AGENT_SUBJECT> Filter by local agent subject public key.
  • --tool-server <TOOL_SERVER> Filter by local tool server.
  • --tool-name <TOOL_NAME> Filter by local tool name.
  • --since <SINCE> Filter: receipts with timestamp >= this Unix seconds value.
  • --until <UNTIL> Filter: receipts with timestamp <= this Unix seconds value.
  • --issuer <ISSUER> Filter by remote share issuer.
  • --partner <PARTNER> Filter by remote share partner.
  • --limit <LIMIT> Maximum number of shared-evidence references to return. Default 50.

chio trust authorization-context

Render derived external authorization context from governed receipts.

Command synopsistext
chio trust authorization-context [OPTIONS] <COMMAND>

chio trust authorization-context metadata

Export machine-readable Chio authorization-profile metadata for enterprise IAM review.

Command synopsistext
chio trust authorization-context metadata [OPTIONS]

chio trust authorization-context list

List derived authorization-context mappings from local state or trust-control.

Command synopsistext
chio trust authorization-context list [OPTIONS]
  • --capability <CAPABILITY> Filter by capability ID.
  • --agent-subject <AGENT_SUBJECT> Filter by agent subject public key.
  • --tool-server <TOOL_SERVER> Filter by tool server.
  • --tool-name <TOOL_NAME> Filter by tool name.
  • --since <SINCE> Include receipts with timestamp >= this Unix seconds value.
  • --until <UNTIL> Include receipts with timestamp <= this Unix seconds value.
  • --limit <LIMIT> Maximum number of derived authorization-context rows to embed. Default 50.

chio trust authorization-context review-pack

Export an enterprise reviewer pack tying authorization context back to governed receipt truth.

Command synopsistext
chio trust authorization-context review-pack [OPTIONS]
  • --capability <CAPABILITY> Filter by capability ID.
  • --agent-subject <AGENT_SUBJECT> Filter by agent subject public key.
  • --tool-server <TOOL_SERVER> Filter by tool server.
  • --tool-name <TOOL_NAME> Filter by tool name.
  • --since <SINCE> Include receipts with timestamp >= this Unix seconds value.
  • --until <UNTIL> Include receipts with timestamp <= this Unix seconds value.
  • --limit <LIMIT> Maximum number of derived authorization-context rows to embed. Default 50.

chio trust appraisal

Export a signed runtime-attestation appraisal report.

Command synopsistext
chio trust appraisal [OPTIONS] <COMMAND>

chio trust appraisal export

Export a signed runtime-attestation appraisal report from local input or trust-control.

Command synopsistext
chio trust appraisal export [OPTIONS] --input <INPUT>
  • --input <INPUT> Input JSON or YAML file containing a RuntimeAttestationEvidence payload. Required.
  • --policy-file <POLICY_FILE> Optional HushSpec policy used to evaluate policy-visible outcomes locally.

chio trust appraisal export-result

Export a signed portable runtime-attestation appraisal result artifact.

Command synopsistext
chio trust appraisal export-result [OPTIONS] --issuer <ISSUER> --input <INPUT>
  • --issuer <ISSUER> Issuer identifier recorded in the exported result. Required.
  • --input <INPUT> Input JSON or YAML file containing a RuntimeAttestationEvidence payload. Required.
  • --policy-file <POLICY_FILE> Optional HushSpec policy used to evaluate exporter-visible outcomes locally.

chio trust appraisal import

Evaluate a signed external runtime-attestation appraisal result against local import policy.

Command synopsistext
chio trust appraisal import [OPTIONS] --input <INPUT> --policy-file <POLICY_FILE>
  • --input <INPUT> Input JSON or YAML file containing a signed appraisal result envelope. Required.
  • --policy-file <POLICY_FILE> JSON or YAML file containing a RuntimeAttestationImportedAppraisalPolicy payload. Required.

chio trust behavioral-feed

Export a signed insurer-facing behavioral feed from canonical trust data.

Command synopsistext
chio trust behavioral-feed [OPTIONS] <COMMAND>

chio trust behavioral-feed export

Export a signed behavioral feed from local state or trust-control.

Command synopsistext
chio trust behavioral-feed export [OPTIONS]
  • --capability <CAPABILITY> Filter by capability ID.
  • --agent-subject <AGENT_SUBJECT> Filter by agent subject public key.
  • --tool-server <TOOL_SERVER> Filter by tool server.
  • --tool-name <TOOL_NAME> Filter by tool name.
  • --since <SINCE> Include receipts with timestamp >= this Unix seconds value.
  • --until <UNTIL> Include receipts with timestamp <= this Unix seconds value.
  • --receipt-limit <RECEIPT_LIMIT> Maximum number of receipt detail rows to embed. Default 100.

chio trust exposure-ledger

Export a signed exposure ledger from canonical trust and underwriting data.

Command synopsistext
chio trust exposure-ledger [OPTIONS] <COMMAND>

chio trust exposure-ledger export

Export a signed exposure ledger from local state or trust-control.

Command synopsistext
chio trust exposure-ledger export [OPTIONS]
  • --capability <CAPABILITY> Filter by capability ID.
  • --agent-subject <AGENT_SUBJECT> Filter by agent subject public key.
  • --tool-server <TOOL_SERVER> Filter by tool server.
  • --tool-name <TOOL_NAME> Filter by tool name.
  • --since <SINCE> Include receipts with timestamp >= this Unix seconds value.
  • --until <UNTIL> Include receipts with timestamp <= this Unix seconds value.
  • --receipt-limit <RECEIPT_LIMIT> Maximum number of receipt rows to embed. Default 100.
  • --decision-limit <DECISION_LIMIT> Maximum number of underwriting decision rows to embed. Default 50.

chio trust credit-scorecard

Export a signed subject-scoped credit scorecard from exposure and reputation data.

Command synopsistext
chio trust credit-scorecard [OPTIONS] <COMMAND>

chio trust credit-scorecard export

Export a signed credit scorecard from local state or trust-control.

Command synopsistext
chio trust credit-scorecard export [OPTIONS]
  • --agent-subject <AGENT_SUBJECT> Subject public key to score.
  • --capability <CAPABILITY> Optional filter by capability ID.
  • --tool-server <TOOL_SERVER> Optional filter by tool server.
  • --tool-name <TOOL_NAME> Optional filter by tool name.
  • --since <SINCE> Include receipts with timestamp >= this Unix seconds value.
  • --until <UNTIL> Include receipts with timestamp <= this Unix seconds value.
  • --receipt-limit <RECEIPT_LIMIT> Maximum number of receipt rows to evaluate. Default 100.
  • --decision-limit <DECISION_LIMIT> Maximum number of underwriting decision rows to evaluate. Default 50.
  • --agent <AGENT> Agent to select, by the name you gave it (fixer) or its DID; resolved to the agent’s subject key from the operator’s agents.

chio trust capital-book

Export a signed live capital book with explicit source-of-funds attribution.

Command synopsistext
chio trust capital-book [OPTIONS] <COMMAND>

chio trust capital-book export

Export a signed live capital book from canonical facility, bond, and loss posture.

Command synopsistext
chio trust capital-book export [OPTIONS] --agent-subject <AGENT_SUBJECT>
  • --agent-subject <AGENT_SUBJECT> Subject public key to evaluate. Required.
  • --capability <CAPABILITY> Optional filter by capability ID.
  • --tool-server <TOOL_SERVER> Optional filter by tool server.
  • --tool-name <TOOL_NAME> Optional filter by tool name.
  • --since <SINCE> Include receipts with timestamp >= this Unix seconds value.
  • --until <UNTIL> Include receipts with timestamp <= this Unix seconds value.
  • --receipt-limit <RECEIPT_LIMIT> Maximum number of receipt rows to inspect for disbursement provenance. Default 100.
  • --facility-limit <FACILITY_LIMIT> Maximum number of facility rows to inspect. Default 10.
  • --bond-limit <BOND_LIMIT> Maximum number of bond rows to inspect. Default 10.
  • --loss-event-limit <LOSS_EVENT_LIMIT> Maximum number of loss-lifecycle rows to inspect. Default 25.

chio trust capital-instruction

Issue one custody-neutral escrow or reserve instruction artifact.

Command synopsistext
chio trust capital-instruction [OPTIONS] <COMMAND>

chio trust capital-instruction issue

Issue one custody-neutral escrow or reserve instruction artifact from JSON or YAML input.

Command synopsistext
chio trust capital-instruction issue [OPTIONS] --input-file <INPUT_FILE>
  • --input-file <INPUT_FILE> JSON or YAML capital-instruction input file. Required.

chio trust capital-allocation

Issue one simulation-first capital-allocation decision for a governed action.

Command synopsistext
chio trust capital-allocation [OPTIONS] <COMMAND>

chio trust capital-allocation issue

Issue one live capital-allocation decision artifact from JSON or YAML input.

Command synopsistext
chio trust capital-allocation issue [OPTIONS] --input-file <INPUT_FILE>
  • --input-file <INPUT_FILE> JSON or YAML capital-allocation input file. Required.
  • --certification-registry-file <CERTIFICATION_REGISTRY_FILE> Optional local certification registry file used when not using --control-url.

chio trust facility

Evaluate, issue, and list bounded credit facilities from subject-scoped evidence.

Command synopsistext
chio trust facility [OPTIONS] <COMMAND>

chio trust facility evaluate

Evaluate a deterministic facility-policy report without persisting an artifact.

Command synopsistext
chio trust facility evaluate [OPTIONS] --agent-subject <AGENT_SUBJECT>
  • --agent-subject <AGENT_SUBJECT> Subject public key to evaluate. Required.
  • --capability <CAPABILITY> Optional filter by capability ID.
  • --tool-server <TOOL_SERVER> Optional filter by tool server.
  • --tool-name <TOOL_NAME> Optional filter by tool name.
  • --since <SINCE> Include receipts with timestamp >= this Unix seconds value.
  • --until <UNTIL> Include receipts with timestamp <= this Unix seconds value.
  • --receipt-limit <RECEIPT_LIMIT> Maximum number of receipt rows to evaluate. Default 100.
  • --decision-limit <DECISION_LIMIT> Maximum number of underwriting decision rows to evaluate. Default 50.
  • --certification-registry-file <CERTIFICATION_REGISTRY_FILE> Optional local certification registry file used when not using --control-url.

chio trust facility issue

Issue and persist a signed facility artifact from deterministic facility policy.

Command synopsistext
chio trust facility issue [OPTIONS] --agent-subject <AGENT_SUBJECT>
  • --agent-subject <AGENT_SUBJECT> Subject public key to evaluate. Required.
  • --capability <CAPABILITY> Optional filter by capability ID.
  • --tool-server <TOOL_SERVER> Optional filter by tool server.
  • --tool-name <TOOL_NAME> Optional filter by tool name.
  • --since <SINCE> Include receipts with timestamp >= this Unix seconds value.
  • --until <UNTIL> Include receipts with timestamp <= this Unix seconds value.
  • --receipt-limit <RECEIPT_LIMIT> Maximum number of receipt rows to evaluate. Default 100.
  • --decision-limit <DECISION_LIMIT> Maximum number of underwriting decision rows to evaluate. Default 50.
  • --supersedes-facility-id <SUPERSEDES_FACILITY_ID> Optional previously active facility to supersede.
  • --certification-registry-file <CERTIFICATION_REGISTRY_FILE> Optional local certification registry file used when not using --control-url.

chio trust facility list

List persisted credit facility artifacts.

Command synopsistext
chio trust facility list [OPTIONS]
  • --facility-id <FACILITY_ID> Filter by facility ID.
  • --capability <CAPABILITY> Filter by capability ID.
  • --agent-subject <AGENT_SUBJECT> Filter by agent subject public key.
  • --tool-server <TOOL_SERVER> Filter by tool server.
  • --tool-name <TOOL_NAME> Filter by tool name.
  • --disposition <DISPOSITION> Filter by disposition (grant, manual_review, deny).
  • --lifecycle-state <LIFECYCLE_STATE> Filter by lifecycle state (active, superseded, denied, expired).
  • --limit <LIMIT> Maximum number of facility rows to embed. Default 50.

chio trust bond

Evaluate, issue, and list reserve-lock bond artifacts from credit evidence.

Command synopsistext
chio trust bond [OPTIONS] <COMMAND>

chio trust bond evaluate

Evaluate a deterministic bond-policy report without persisting an artifact.

Command synopsistext
chio trust bond evaluate [OPTIONS] --agent-subject <AGENT_SUBJECT>
  • --agent-subject <AGENT_SUBJECT> Subject public key to evaluate. Required.
  • --capability <CAPABILITY> Optional filter by capability ID.
  • --tool-server <TOOL_SERVER> Optional filter by tool server.
  • --tool-name <TOOL_NAME> Optional filter by tool name.
  • --since <SINCE> Include receipts with timestamp >= this Unix seconds value.
  • --until <UNTIL> Include receipts with timestamp <= this Unix seconds value.
  • --receipt-limit <RECEIPT_LIMIT> Maximum number of receipt rows to evaluate. Default 100.
  • --decision-limit <DECISION_LIMIT> Maximum number of underwriting decision rows to evaluate. Default 50.
  • --certification-registry-file <CERTIFICATION_REGISTRY_FILE> Optional local certification registry file used when not using --control-url.

chio trust bond issue

Issue and persist a signed bond artifact from deterministic bond policy.

Command synopsistext
chio trust bond issue [OPTIONS] --agent-subject <AGENT_SUBJECT>
  • --agent-subject <AGENT_SUBJECT> Subject public key to evaluate. Required.
  • --capability <CAPABILITY> Optional filter by capability ID.
  • --tool-server <TOOL_SERVER> Optional filter by tool server.
  • --tool-name <TOOL_NAME> Optional filter by tool name.
  • --since <SINCE> Include receipts with timestamp >= this Unix seconds value.
  • --until <UNTIL> Include receipts with timestamp <= this Unix seconds value.
  • --receipt-limit <RECEIPT_LIMIT> Maximum number of receipt rows to evaluate. Default 100.
  • --decision-limit <DECISION_LIMIT> Maximum number of underwriting decision rows to evaluate. Default 50.
  • --supersedes-bond-id <SUPERSEDES_BOND_ID> Optional previously active bond to supersede.
  • --certification-registry-file <CERTIFICATION_REGISTRY_FILE> Optional local certification registry file used when not using --control-url.

chio trust bond simulate

Simulate bonded execution under an operator control policy without mutating state.

Command synopsistext
chio trust bond simulate [OPTIONS] --bond-id <BOND_ID> --autonomy-tier <AUTONOMY_TIER> --runtime-assurance-tier <RUNTIME_ASSURANCE_TIER> --policy-file <POLICY_FILE>
  • --bond-id <BOND_ID> Bond artifact ID to evaluate. Required.
  • --autonomy-tier <AUTONOMY_TIER> Requested autonomy tier (direct, delegated, autonomous). Required.
  • --runtime-assurance-tier <RUNTIME_ASSURANCE_TIER> Runtime assurance tier attached to the simulated request. Required.
  • --call-chain-present Whether delegated call-chain context is present.
  • --policy-file <POLICY_FILE> YAML or JSON operator control policy file. Required.

chio trust bond list

List persisted credit bond artifacts.

Command synopsistext
chio trust bond list [OPTIONS]
  • --bond-id <BOND_ID> Filter by bond ID.
  • --facility-id <FACILITY_ID> Filter by facility ID.
  • --capability <CAPABILITY> Filter by capability ID.
  • --agent-subject <AGENT_SUBJECT> Filter by agent subject public key.
  • --tool-server <TOOL_SERVER> Filter by tool server.
  • --tool-name <TOOL_NAME> Filter by tool name.
  • --disposition <DISPOSITION> Filter by disposition (lock, hold, release, impair).
  • --lifecycle-state <LIFECYCLE_STATE> Filter by lifecycle state (active, superseded, released, impaired, expired).
  • --limit <LIMIT> Maximum number of bond rows to embed. Default 50.

chio trust loss

Evaluate, issue, and list immutable bond loss-lifecycle artifacts.

Command synopsistext
chio trust loss [OPTIONS] <COMMAND>

chio trust loss evaluate

Evaluate a deterministic bond loss-lifecycle transition without persisting an artifact.

Command synopsistext
chio trust loss evaluate [OPTIONS] --bond-id <BOND_ID> --event-kind <EVENT_KIND>
  • --bond-id <BOND_ID> Bond ID to evaluate against. Required.
  • --event-kind <EVENT_KIND> Event kind (delinquency, recovery, reserve_release, reserve_slash, write_off). Required.
  • --amount-units <AMOUNT_UNITS> Optional explicit amount in minor units.
  • --amount-currency <AMOUNT_CURRENCY> Optional explicit amount currency.

chio trust loss issue

Issue and persist a signed bond loss-lifecycle artifact.

Command synopsistext
chio trust loss issue [OPTIONS] --bond-id <BOND_ID> --event-kind <EVENT_KIND>
  • --bond-id <BOND_ID> Bond ID to evaluate against. Required.
  • --event-kind <EVENT_KIND> Event kind (delinquency, recovery, reserve_release, reserve_slash, write_off). Required.
  • --amount-units <AMOUNT_UNITS> Optional explicit amount in minor units.
  • --amount-currency <AMOUNT_CURRENCY> Optional explicit amount currency.
  • --authority-chain-file <AUTHORITY_CHAIN_FILE> Optional JSON/YAML file containing Vec<CapitalExecutionAuthorityStep>.
  • --execution-window-file <EXECUTION_WINDOW_FILE> Optional JSON/YAML file containing CapitalExecutionWindow.
  • --rail-file <RAIL_FILE> Optional JSON/YAML file containing CapitalExecutionRail.
  • --observed-execution-file <OBSERVED_EXECUTION_FILE> Optional JSON/YAML file containing CapitalExecutionObservation.
  • --appeal-window-ends-at <APPEAL_WINDOW_ENDS_AT> Optional reserve-control appeal window close timestamp.
  • --description <DESCRIPTION> Optional reserve-control description recorded on the lifecycle artifact.

chio trust loss list

List persisted bond loss-lifecycle artifacts.

Command synopsistext
chio trust loss list [OPTIONS]
  • --event-id <EVENT_ID> Filter by event ID.
  • --bond-id <BOND_ID> Filter by bond ID.
  • --facility-id <FACILITY_ID> Filter by facility ID.
  • --capability <CAPABILITY> Filter by capability ID.
  • --agent-subject <AGENT_SUBJECT> Filter by agent subject public key.
  • --tool-server <TOOL_SERVER> Filter by tool server.
  • --tool-name <TOOL_NAME> Filter by tool name.
  • --event-kind <EVENT_KIND> Filter by event kind (delinquency, recovery, reserve_release, reserve_slash, write_off).
  • --limit <LIMIT> Maximum number of event rows to embed. Default 50.

chio trust credit-backtest

Export deterministic credit backtests over historical subject-scoped evidence.

Command synopsistext
chio trust credit-backtest [OPTIONS] <COMMAND>

chio trust credit-backtest export

Export one deterministic credit backtest report over historical evidence windows.

Command synopsistext
chio trust credit-backtest export [OPTIONS] --agent-subject <AGENT_SUBJECT>
  • --agent-subject <AGENT_SUBJECT> Subject public key to evaluate. Required.
  • --capability <CAPABILITY> Optional filter by capability ID.
  • --tool-server <TOOL_SERVER> Optional filter by tool server.
  • --tool-name <TOOL_NAME> Optional filter by tool name.
  • --since <SINCE> Include receipts with timestamp >= this Unix seconds value.
  • --until <UNTIL> Include receipts with timestamp <= this Unix seconds value.
  • --receipt-limit <RECEIPT_LIMIT> Maximum number of receipt rows to evaluate per window. Default 100.
  • --decision-limit <DECISION_LIMIT> Maximum number of underwriting decision rows to evaluate per window. Default 50.
  • --window-seconds <WINDOW_SECONDS> Width of each replay window in seconds. Default 604800.
  • --window-count <WINDOW_COUNT> Number of windows to replay. Default 4.
  • --stale-after-seconds <STALE_AFTER_SECONDS> Evidence older than this threshold is flagged stale. Default 2592000.
  • --certification-registry-file <CERTIFICATION_REGISTRY_FILE> Optional local certification registry file used when not using --control-url.

chio trust provider-risk-package

Export one signed provider-facing risk package over canonical credit truth.

Command synopsistext
chio trust provider-risk-package [OPTIONS] <COMMAND>

chio trust provider-risk-package export

Export one signed provider-facing risk package over canonical subject-scoped evidence.

Command synopsistext
chio trust provider-risk-package export [OPTIONS] --agent-subject <AGENT_SUBJECT>
  • --agent-subject <AGENT_SUBJECT> Subject public key to evaluate. Required.
  • --capability <CAPABILITY> Optional filter by capability ID.
  • --tool-server <TOOL_SERVER> Optional filter by tool server.
  • --tool-name <TOOL_NAME> Optional filter by tool name.
  • --since <SINCE> Include receipts with timestamp >= this Unix seconds value.
  • --until <UNTIL> Include receipts with timestamp <= this Unix seconds value.
  • --receipt-limit <RECEIPT_LIMIT> Maximum number of receipt rows to evaluate. Default 100.
  • --decision-limit <DECISION_LIMIT> Maximum number of underwriting decision rows to evaluate. Default 50.
  • --recent-loss-limit <RECENT_LOSS_LIMIT> Maximum number of recent loss events to include. Default 10.
  • --certification-registry-file <CERTIFICATION_REGISTRY_FILE> Optional local certification registry file used when not using --control-url.

chio trust liability-provider

Issue, list, and resolve curated liability-market provider registry entries.

Command synopsistext
chio trust liability-provider [OPTIONS] <COMMAND>

chio trust liability-provider issue

Issue and persist a signed curated liability-provider artifact from JSON or YAML input.

Command synopsistext
chio trust liability-provider issue [OPTIONS] --input-file <INPUT_FILE>
  • --input-file <INPUT_FILE> JSON or YAML provider report input file. Required.
  • --supersedes-provider-record-id <SUPERSEDES_PROVIDER_RECORD_ID> Optional previously active provider record to supersede.

chio trust liability-provider list

List persisted liability-provider artifacts.

Command synopsistext
chio trust liability-provider list [OPTIONS]
  • --provider-id <PROVIDER_ID> Filter by provider ID.
  • --jurisdiction <JURISDICTION> Filter by jurisdiction.
  • --coverage-class <COVERAGE_CLASS> Filter by coverage class (tool_execution, data_breach, financial_loss, professional_liability, regulatory_response).
  • --currency <CURRENCY> Filter by currency.
  • --lifecycle-state <LIFECYCLE_STATE> Filter by lifecycle state (active, suspended, superseded, retired).
  • --limit <LIMIT> Maximum number of provider rows to embed. Default 50.

chio trust liability-provider resolve

Resolve one provider + jurisdiction + coverage + currency combination fail closed.

Command synopsistext
chio trust liability-provider resolve [OPTIONS] --provider-id <PROVIDER_ID> --jurisdiction <JURISDICTION> --coverage-class <COVERAGE_CLASS> --currency <CURRENCY>
  • --provider-id <PROVIDER_ID> Provider ID to resolve. Required.
  • --jurisdiction <JURISDICTION> Jurisdiction to resolve. Required.
  • --coverage-class <COVERAGE_CLASS> Coverage class to resolve. Required.
  • --currency <CURRENCY> Currency to resolve. Required.

chio trust liability-market

Issue quote, placement, and bound-coverage artifacts and list workflow state.

Command synopsistext
chio trust liability-market [OPTIONS] <COMMAND>

chio trust liability-market quote-request-issue

Issue and persist a signed liability quote request from JSON or YAML input.

Command synopsistext
chio trust liability-market quote-request-issue [OPTIONS] --input-file <INPUT_FILE>
  • --input-file <INPUT_FILE> JSON or YAML quote-request input file. Required.

chio trust liability-market quote-response-issue

Issue and persist a signed liability quote response from JSON or YAML input.

Command synopsistext
chio trust liability-market quote-response-issue [OPTIONS] --input-file <INPUT_FILE>
  • --input-file <INPUT_FILE> JSON or YAML quote-response input file. Required.

chio trust liability-market pricing-authority-issue

Issue and persist a signed delegated pricing-authority artifact.

Command synopsistext
chio trust liability-market pricing-authority-issue [OPTIONS] --input-file <INPUT_FILE>
  • --input-file <INPUT_FILE> JSON or YAML pricing-authority input file. Required.

chio trust liability-market placement-issue

Issue and persist a signed liability placement from JSON or YAML input.

Command synopsistext
chio trust liability-market placement-issue [OPTIONS] --input-file <INPUT_FILE>
  • --input-file <INPUT_FILE> JSON or YAML placement input file. Required.

chio trust liability-market bound-coverage-issue

Issue and persist a signed bound-coverage artifact from JSON or YAML input.

Command synopsistext
chio trust liability-market bound-coverage-issue [OPTIONS] --input-file <INPUT_FILE>
  • --input-file <INPUT_FILE> JSON or YAML bound-coverage input file. Required.

chio trust liability-market auto-bind-issue

Evaluate and persist one automatic bind decision plus issued placement/bound coverage.

Command synopsistext
chio trust liability-market auto-bind-issue [OPTIONS] --input-file <INPUT_FILE>
  • --input-file <INPUT_FILE> JSON or YAML auto-bind input file. Required.

chio trust liability-market claim-issue

Issue and persist a signed liability claim package from JSON or YAML input.

Command synopsistext
chio trust liability-market claim-issue [OPTIONS] --input-file <INPUT_FILE>
  • --input-file <INPUT_FILE> JSON or YAML claim input file. Required.

chio trust liability-market claim-response-issue

Issue and persist a signed liability claim response from JSON or YAML input.

Command synopsistext
chio trust liability-market claim-response-issue [OPTIONS] --input-file <INPUT_FILE>
  • --input-file <INPUT_FILE> JSON or YAML claim-response input file. Required.

chio trust liability-market dispute-issue

Issue and persist a signed liability claim dispute from JSON or YAML input.

Command synopsistext
chio trust liability-market dispute-issue [OPTIONS] --input-file <INPUT_FILE>
  • --input-file <INPUT_FILE> JSON or YAML dispute input file. Required.

chio trust liability-market adjudication-issue

Issue and persist a signed liability claim adjudication from JSON or YAML input.

Command synopsistext
chio trust liability-market adjudication-issue [OPTIONS] --input-file <INPUT_FILE>
  • --input-file <INPUT_FILE> JSON or YAML adjudication input file. Required.
  • --roster-policy-file <ROSTER_POLICY_FILE> JSON file containing the operator roster policy (roster, allowed decision rules, roster anchor). Required when --control-url is not set.

chio trust liability-market claim-payout-instruction-issue

Issue and persist a signed liability claim payout instruction from JSON or YAML input.

Command synopsistext
chio trust liability-market claim-payout-instruction-issue [OPTIONS] --input-file <INPUT_FILE>
  • --input-file <INPUT_FILE> JSON or YAML claim payout instruction input file. Required.
  • --roster-policy-file <ROSTER_POLICY_FILE> JSON file containing the operator roster policy. Required when --control-url is not set.

chio trust liability-market claim-payout-receipt-issue

Issue and persist a signed liability claim payout receipt from JSON or YAML input.

Command synopsistext
chio trust liability-market claim-payout-receipt-issue [OPTIONS] --input-file <INPUT_FILE>
  • --input-file <INPUT_FILE> JSON or YAML claim payout receipt input file. Required.

chio trust liability-market claim-settlement-instruction-issue

Issue and persist a signed liability claim settlement instruction from JSON or YAML input.

Command synopsistext
chio trust liability-market claim-settlement-instruction-issue [OPTIONS] --input-file <INPUT_FILE>
  • --input-file <INPUT_FILE> JSON or YAML claim settlement instruction input file. Required.
  • --roster-policy-file <ROSTER_POLICY_FILE> JSON file containing the operator roster policy. Required when --control-url is not set.

chio trust liability-market claim-settlement-receipt-issue

Issue and persist a signed liability claim settlement receipt from JSON or YAML input.

Command synopsistext
chio trust liability-market claim-settlement-receipt-issue [OPTIONS] --input-file <INPUT_FILE>
  • --input-file <INPUT_FILE> JSON or YAML claim settlement receipt input file. Required.

chio trust liability-market list

List quote-request to bound-coverage workflow rows.

Command synopsistext
chio trust liability-market list [OPTIONS]
  • --quote-request-id <QUOTE_REQUEST_ID> Filter by quote request ID.
  • --provider-id <PROVIDER_ID> Filter by provider ID.
  • --agent-subject <AGENT_SUBJECT> Filter by agent subject public key.
  • --jurisdiction <JURISDICTION> Filter by jurisdiction.
  • --coverage-class <COVERAGE_CLASS> Filter by coverage class (tool_execution, data_breach, financial_loss, professional_liability, regulatory_response).
  • --currency <CURRENCY> Filter by currency.
  • --limit <LIMIT> Maximum number of workflow rows to embed. Default 50.

chio trust liability-market claims-list

List claim-package to adjudication workflow rows.

Command synopsistext
chio trust liability-market claims-list [OPTIONS]
  • --claim-id <CLAIM_ID> Filter by claim ID.
  • --provider-id <PROVIDER_ID> Filter by provider ID.
  • --agent-subject <AGENT_SUBJECT> Filter by agent subject public key.
  • --jurisdiction <JURISDICTION> Filter by jurisdiction.
  • --policy-number <POLICY_NUMBER> Filter by policy number.
  • --limit <LIMIT> Maximum number of claim rows to embed. Default 50.

chio trust underwriting-input

Export a signed underwriting policy-input snapshot from canonical trust data.

Command synopsistext
chio trust underwriting-input [OPTIONS] <COMMAND>

chio trust underwriting-input export

Export a signed underwriting policy-input snapshot from local state or trust-control.

Command synopsistext
chio trust underwriting-input export [OPTIONS]
  • --capability <CAPABILITY> Filter by capability ID.
  • --agent-subject <AGENT_SUBJECT> Filter by agent subject public key.
  • --tool-server <TOOL_SERVER> Filter by tool server.
  • --tool-name <TOOL_NAME> Filter by tool name.
  • --since <SINCE> Include receipts with timestamp >= this Unix seconds value.
  • --until <UNTIL> Include receipts with timestamp <= this Unix seconds value.
  • --receipt-limit <RECEIPT_LIMIT> Maximum number of receipt references to embed. Default 100.
  • --certification-registry-file <CERTIFICATION_REGISTRY_FILE> Optional local certification registry file used when not using --control-url.

chio trust underwriting-decision

Evaluate a bounded underwriting decision from canonical trust data.

Command synopsistext
chio trust underwriting-decision [OPTIONS] <COMMAND>

chio trust underwriting-decision evaluate

Evaluate a bounded underwriting decision from local state or trust-control.

Command synopsistext
chio trust underwriting-decision evaluate [OPTIONS]
  • --capability <CAPABILITY> Filter by capability ID.
  • --agent-subject <AGENT_SUBJECT> Filter by agent subject public key.
  • --tool-server <TOOL_SERVER> Filter by tool server.
  • --tool-name <TOOL_NAME> Filter by tool name.
  • --since <SINCE> Include receipts with timestamp >= this Unix seconds value.
  • --until <UNTIL> Include receipts with timestamp <= this Unix seconds value.
  • --receipt-limit <RECEIPT_LIMIT> Maximum number of receipt references to inspect. Default 100.
  • --certification-registry-file <CERTIFICATION_REGISTRY_FILE> Optional local certification registry file used when not using --control-url.

chio trust underwriting-decision simulate

Simulate an alternative underwriting policy against canonical evidence without persisting a decision.

Command synopsistext
chio trust underwriting-decision simulate [OPTIONS] --policy-file <POLICY_FILE>
  • --capability <CAPABILITY> Filter by capability ID.
  • --agent-subject <AGENT_SUBJECT> Filter by agent subject public key.
  • --tool-server <TOOL_SERVER> Filter by tool server.
  • --tool-name <TOOL_NAME> Filter by tool name.
  • --since <SINCE> Include receipts with timestamp >= this Unix seconds value.
  • --until <UNTIL> Include receipts with timestamp <= this Unix seconds value.
  • --receipt-limit <RECEIPT_LIMIT> Maximum number of receipt references to inspect. Default 100.
  • --policy-file <POLICY_FILE> YAML or JSON underwriting decision policy file. Required.
  • --certification-registry-file <CERTIFICATION_REGISTRY_FILE> Optional local certification registry file used when not using --control-url.

chio trust underwriting-decision issue

Issue and persist a signed underwriting decision artifact.

Command synopsistext
chio trust underwriting-decision issue [OPTIONS]
  • --capability <CAPABILITY> Filter by capability ID.
  • --agent-subject <AGENT_SUBJECT> Filter by agent subject public key.
  • --tool-server <TOOL_SERVER> Filter by tool server.
  • --tool-name <TOOL_NAME> Filter by tool name.
  • --since <SINCE> Include receipts with timestamp >= this Unix seconds value.
  • --until <UNTIL> Include receipts with timestamp <= this Unix seconds value.
  • --receipt-limit <RECEIPT_LIMIT> Maximum number of receipt references to inspect. Default 100.
  • --certification-registry-file <CERTIFICATION_REGISTRY_FILE> Optional local certification registry file used when not using --control-url.
  • --supersedes-decision-id <SUPERSEDES_DECISION_ID> Optional prior decision ID this new artifact supersedes.

chio trust underwriting-decision list

List persisted underwriting decision artifacts and appeal status.

Command synopsistext
chio trust underwriting-decision list [OPTIONS]
  • --decision-id <DECISION_ID> Filter by decision ID.
  • --capability <CAPABILITY> Filter by capability ID.
  • --agent-subject <AGENT_SUBJECT> Filter by agent subject public key.
  • --tool-server <TOOL_SERVER> Filter by tool server.
  • --tool-name <TOOL_NAME> Filter by tool name.
  • --outcome <OUTCOME> Filter by outcome (approve, reduce_ceiling, step_up, deny).
  • --lifecycle-state <LIFECYCLE_STATE> Filter by lifecycle state (active, superseded).
  • --appeal-status <APPEAL_STATUS> Filter by latest appeal status (open, accepted, rejected).
  • --limit <LIMIT> Maximum number of persisted decision rows to return. Default 50.

chio trust underwriting-appeal

Create or resolve underwriting appeals against persisted decisions.

Command synopsistext
chio trust underwriting-appeal [OPTIONS] <COMMAND>

chio trust underwriting-appeal create

Create an underwriting appeal record for one persisted decision.

Command synopsistext
chio trust underwriting-appeal create [OPTIONS] --decision-id <DECISION_ID> --requested-by <REQUESTED_BY> --reason <REASON>
  • --decision-id <DECISION_ID> Decision ID to appeal. Required.
  • --requested-by <REQUESTED_BY> Operator or system subject opening the appeal. Required.
  • --reason <REASON> Short appeal reason. Required.
  • --note <NOTE> Optional freeform note.

chio trust underwriting-appeal resolve

Resolve one open underwriting appeal.

Command synopsistext
chio trust underwriting-appeal resolve [OPTIONS] --appeal-id <APPEAL_ID> --resolution <RESOLUTION> --resolved-by <RESOLVED_BY>
  • --appeal-id <APPEAL_ID> Appeal ID to resolve. Required.
  • --resolution <RESOLUTION> Resolution outcome (accepted or rejected). Required.
  • --resolved-by <RESOLVED_BY> Operator or system subject resolving the appeal. Required.
  • --note <NOTE> Optional freeform note.
  • --replacement-decision-id <REPLACEMENT_DECISION_ID> Optional replacement decision ID when an appeal resolution references a superseding artifact.

chio trust trace-verify

Check a signed observation log against a bounded transition model.

Command synopsistext
chio trust trace-verify [OPTIONS] --log <LOG> --trusted-key <TRUSTED_KEYS>
  • --log <LOG> Canonical NDJSON observation log. Required.
  • --trusted-key <TRUSTED_KEYS> Trusted observer public key. Repeat to trust multiple observers. Required.
  • --spec <SPEC> Transition model used for projection and reachability. Default revocation-propagation. Values revocation-propagation.
  • --apalache-bin <APALACHE_BIN> Apalache executable. Default apalache-mc.
  • --timeout-secs <TIMEOUT_SECS> Maximum seconds for each bounded reachability query. Default 300.
  • --itf-output <ITF_OUTPUT> Optional path for the deterministic ITF projection.
  • --report-output <REPORT_OUTPUT> Optional path for the validation report.

chio trust revoke

Persist a capability revocation into the configured revocation database.

Command synopsistext
chio trust revoke [OPTIONS] --capability-id <CAPABILITY_ID>
  • --capability-id <CAPABILITY_ID> Capability ID to revoke. Required.

chio trust federated-issue

Issue one local capability after verifying a challenge-bound portable presentation.

Command synopsistext
chio trust federated-issue [OPTIONS] --presentation-response <PRESENTATION_RESPONSE> --challenge <CHALLENGE> --capability-policy <CAPABILITY_POLICY>
  • --presentation-response <PRESENTATION_RESPONSE> Signed passport presentation response from the external agent. Required.
  • --challenge <CHALLENGE> Exact expected challenge JSON used to bind the presentation to this verifier. Required.
  • --capability-policy <CAPABILITY_POLICY> Policy file whose default capability definition is the single capability to issue. Required.
  • --enterprise-identity <ENTERPRISE_IDENTITY> Optional enterprise identity context JSON used for provider-admin-gated admission.
  • --delegation-policy <DELEGATION_POLICY> Optional signed federated delegation policy that sets the parent scope/TTL ceiling.
  • --upstream-capability-id <UPSTREAM_CAPABILITY_ID> Optional imported upstream capability ID used as the parent for multi-hop federated delegation.

chio trust federated-delegation-policy-create

Create a signed federated delegation policy from a single default capability.

Command synopsistext
chio trust federated-delegation-policy-create [OPTIONS] --output <OUTPUT> --signing-seed-file <SIGNING_SEED_FILE> --issuer <ISSUER> --partner <PARTNER> --verifier <VERIFIER> --capability-policy <CAPABILITY_POLICY> --expires-at <EXPIRES_AT>
  • --output <OUTPUT> Output path for the signed policy JSON. Required.
  • --signing-seed-file <SIGNING_SEED_FILE> Persistent seed file used to sign the federated delegation policy. Required.
  • --issuer <ISSUER> Local issuer name or organization identifier. Required.
  • --partner <PARTNER> External partner name or organization identifier. Required.
  • --verifier <VERIFIER> Trust-control verifier URL this policy is bound to. Required.
  • --capability-policy <CAPABILITY_POLICY> Capability policy whose single default capability becomes the delegation ceiling. Required.
  • --expires-at <EXPIRES_AT> Policy expiration as Unix seconds. Required.
  • --purpose <PURPOSE> Optional reason or purpose string embedded in the policy document.
  • --parent-capability-id <PARENT_CAPABILITY_ID> Optional upstream capability ID that this delegation policy is allowed to continue from.

chio trust status

Query whether a capability ID is currently revoked.

Command synopsistext
chio trust status [OPTIONS] --capability-id <CAPABILITY_ID>
  • --capability-id <CAPABILITY_ID> Capability ID to check. Required.

chio trust pin

Pin a key for one verification role in the trust file.

Command synopsistext
chio trust pin [OPTIONS] <ROLE> <KEY>
  • <ROLE> Verification role, such as receipt-kernel, swarm.witness, or issuer. chio trust roles lists them. Required.
  • <KEY> Key, DID, key file, or partner card. Required.
  • --name <NAME> Name for the pin, used by chio trust unpin and shown by verifiers. Defaults to the card’s organization or the key fingerprint.
  • --trust <FILE> Trust file to change instead of the default (.chio/trust.toml in the project, then ~/.chio/trust.toml). Reads CHIO_TRUST.
Additional behavior

KEY is an ed25519: public key, a did:chio identifier, a public key file, or a partner card; a card pins the receipt-signer keys it publishes for the role. The pin is written with its name, role, and source, and every offline verifier reads it.

chio trust pins

List the pins in the trust file: name, role, key fingerprint, and where each came from.

Command synopsistext
chio trust pins [OPTIONS]
  • --role <ROLE> Show only the pins for this role.
  • --trust <FILE> Trust file to change instead of the default (.chio/trust.toml in the project, then ~/.chio/trust.toml). Reads CHIO_TRUST.

chio trust unpin

Remove a pin from the trust file, for every role or for one.

Command synopsistext
chio trust unpin [OPTIONS] <NAME>
  • <NAME> Pin name from chio trust pins. Required.
  • --role <ROLE> Remove the pin from this role only.
  • --trust <FILE> Trust file to change instead of the default (.chio/trust.toml in the project, then ~/.chio/trust.toml). Reads CHIO_TRUST.

chio trust roles

List every verification role, the artifacts it signs, and the commands that read it.

Command synopsistext
chio trust roles [OPTIONS]

Read more in Trust model.

PreviousCLI task index