Struct VerifyCommand 

pub struct VerifyCommand {
    pub attestation: String,
    pub issuer_pk: Option<String>,
    pub issuer_did: Option<String>,
    pub trust: Option<CliTrustPolicy>,
    pub roots_file: Option<PathBuf>,
    pub require_capability: Option<String>,
    pub witness_receipts: Option<PathBuf>,
    pub witness_threshold: usize,
    pub witness_keys: Vec<String>,
}

Fields

attestation: String

Path to authorization JSON file, or “-” to read from stdin.

issuer_pk: Option<String>

Issuer public key in hex format (64 hex chars = 32 bytes).

If provided, bypasses trust resolution and uses this key directly. Takes precedence over –issuer-did and trust policy.

issuer_did: Option<String>

Issuer identity ID for trust-based key resolution.

Looks up the public key from pinned identity store or roots.json. Uses –trust policy to determine behavior for unknown identities.

trust: Option<CliTrustPolicy>

Trust policy for unknown identities.

Resolution precedence:

1. –issuer-pk (direct key, bypasses trust)
2. Pinned identity store (~/.auths/known_identities.json)
3. Repository roots.json (.auths/roots.json)
4. TOFU prompt (if TTY) or explicit rejection (if non-TTY)

Defaults: tofu on TTY, explicit on non-TTY (CI).

roots_file: Option<PathBuf>

Path to roots.json file for explicit trust.

Overrides default .auths/roots.json lookup.

require_capability: Option<String>

Require attestation to have a specific capability (sign-commit, sign-release, manage-members, rotate-keys).

witness_receipts: Option<PathBuf>

Path to witness receipts JSON file.

witness_threshold: usize

Witness quorum threshold (default: 1).

witness_keys: Vec<String>

Witness public keys as DID:hex pairs (e.g., “did:key:z6Mk…:abcd1234…”).

Trait Implementations

impl Args for VerifyCommand

fn group_id() -> Option<Id>

Report the ArgGroup::id for this set of arguments

fn augment_args<'b>(__clap_app: Command) -> Command

Append to Command so it can instantiate Self via FromArgMatches::from_arg_matches_mut

fn augment_args_for_update<'b>(__clap_app: Command) -> Command

Append to Command so it can instantiate self via FromArgMatches::update_from_arg_matches_mut

impl Clone for VerifyCommand

fn clone(&self) -> VerifyCommand

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl CommandFactory for VerifyCommand

fn command<'b>() -> Command

Build a Command that can instantiate Self.

fn command_for_update<'b>() -> Command

Build a Command that can update self.

impl Debug for VerifyCommand

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl FromArgMatches for VerifyCommand

fn from_arg_matches(__clap_arg_matches: &ArgMatches) -> Result<Self, Error>

Instantiate Self from ArgMatches, parsing the arguments as needed.

fn from_arg_matches_mut( __clap_arg_matches: &mut ArgMatches, ) -> Result<Self, Error>

Instantiate Self from ArgMatches, parsing the arguments as needed.

fn update_from_arg_matches( &mut self, __clap_arg_matches: &ArgMatches, ) -> Result<(), Error>

Assign values from ArgMatches to self.

fn update_from_arg_matches_mut( &mut self, __clap_arg_matches: &mut ArgMatches, ) -> Result<(), Error>

Assign values from ArgMatches to self.

impl Parser for VerifyCommand

fn parse() -> Self

Parse from std::env::args_os(), exit on error.

fn try_parse() -> Result<Self, Error>

Parse from std::env::args_os(), return Err on error.

fn parse_from<I, T>(itr: I) -> Self

where I: IntoIterator<Item = T>, T: Into<OsString> + Clone,

Parse from iterator, exit on error.

fn try_parse_from<I, T>(itr: I) -> Result<Self, Error>

where I: IntoIterator<Item = T>, T: Into<OsString> + Clone,

Parse from iterator, return Err on error.

fn update_from<I, T>(&mut self, itr: I)

where I: IntoIterator<Item = T>, T: Into<OsString> + Clone,

Update from iterator, exit on error.

fn try_update_from<I, T>(&mut self, itr: I) -> Result<(), Error>

where I: IntoIterator<Item = T>, T: Into<OsString> + Clone,

Update from iterator, return Err on error.