Command

cscale record verify

Check the record in a clone: every event's hash, signature, and link, every envelope's signature and checksum, and every checkpoint of the log; and in the record's history, that it is one line of commits, and that no checkpoint, and no event a checkpoint covers, was changed or removed. The clone remembers the commit it verified at each ref, and the next check there fails if the record no longer holds it, names another server, or no longer lists a key it did. Check each server's record at a ref of its own. Fetch it first: git fetch origin refs/commitscale/record:refs/commitscale/record

CLI 0.2.11

cscale record verify [OPTIONS] [PATH]

Examples

Verify the record already fetched into this clone.

cscale record verify .

After a known restore, reset the remembered checkpoint and pin a published event key.

cscale record verify . --ref refs/commitscale/record --key ed25519:PUBLIC_KEY --forget

Arguments

PATHoptional: The clone; the current directory if not given

Options

--forget

Forget the record commit this clone verified before at this ref, and start again from the one it holds. Only for a reason you know, such as a restore from a backup

Default: false

--help

Print help (see a summary with '-h')

--json

Print JSON, for agents and scripts

Default: false

--key <KEYS>

Trust only this event key, such as one the server publishes at /api/v1/keys. Repeat for more

--no-browser

Never open a browser: print the page to open instead. Pages that confirm with your passkey, auth login, and web open one

Default: false

Environment: CSCALE_NO_BROWSER

--ref <REV>

The ref or commit that holds the record. A commit, or FETCH_HEAD, is compared with the records it continues, and not remembered

Default: refs/commitscale/record

--server <SERVER>

The Commitscale server, such as https://commitscale.com

Environment: CSCALE_SERVER