Enum WitnessSubcommand 

pub enum WitnessSubcommand {
    Up {
        port: u16,
        data_dir: PathBuf,
        accept_file_key: bool,
        image: Option<String>,
        build_attestation: Option<PathBuf>,
    },
    Down {
        data_dir: PathBuf,
        port: u16,
    },
    Status {
        port: u16,
    },
    VerifyReceipt {
        receipt: PathBuf,
    },
    Register {
        endpoint: String,
    },
    Logs {
        data_dir: PathBuf,
    },
    Start {
        bind: SocketAddr,
        db_path: PathBuf,
        identity: Option<PathBuf>,
        generate: bool,
        curve: String,
    },
    Add {
        url: String,
    },
    Remove {
        url: String,
    },
    List,
}

Witness subcommands.

Variants

Up

Stand up a witness node (and its monitor) from a clean box, one command.

Brings up the node via the embedded standup manifest, mints the node identity at first boot, and prints a health URL. The node runs the released, attested witness image — never a source build.

Fields

port: u16

Host port to publish the node’s endpoint on.

data_dir: PathBuf

Host directory for the node’s persistent data volume.

accept_file_key: bool

Acknowledge file-backed key custody when no managed key store (KMS/enclave) is available. Without this, a node refuses to fall back to a file key rather than silently weaken custody.

image: Option<String>

Override the node image to run. Defaults to the released, attested image the platform ships. Use this only to pin a specific released tag or to run an image already present on an air-gapped host.

build_attestation: Option<PathBuf>

Path to the released image’s signed build attestation (auths artifact sign output). When supplied, the node serves a proof of which binary it runs, and status verifies it. Operators pin the attestation that ships with the released image.

Down

Tear a stood-up witness node down.

Fields

data_dir: PathBuf

Host directory of the node to tear down.

port: u16

Host port the node to tear down was published on.

Status

Report a stood-up node’s health, identity, receipts, and peers.

Fields

port: u16

Host port the node publishes its endpoint on.

VerifyReceipt

Verify a witness receipt offline, on this machine alone.

Reads a receipt bundle (a witness’s signed receipt paired with the witness’s published identity) and checks it with no network and no registry — everything needed is in the bundle. Exits non-zero, with a distinct reason, if the receipt does not verify (a tampered or foreign receipt). This is how a third party who does not trust the node confirms a receipt is genuine corroboration.

Fields

receipt: PathBuf

Path to the receipt bundle JSON file (- reads from stdin).

Register

Open a signed candidate entry to register this node in the directory.

Fields

endpoint: String

Public base URL operators will reach this node at.

Logs

Stream a stood-up node’s logs.

Fields

data_dir: PathBuf

Host directory of the node whose logs to show.

Start

Start the witness HTTP server.

Fields

bind: SocketAddr

Address to bind to (e.g., “127.0.0.1:3333”).

db_path: PathBuf

Path to the SQLite database for witness storage.

identity: Option<PathBuf>

Path to the persisted witness signing-key keystore. The advertised AID derives from this key and is stable across restarts. Without it the witness runs with an EPHEMERAL (unpinnable) identity. The AUTHS_WITNESS_SEED env var (hex seed) takes precedence for containers.

generate: bool

Create the keystore at --identity if it does not exist. Without this, a missing keystore fails closed (never silently mints a fresh key).

curve: String

Signing curve for a newly generated identity: “p256” (default) or “ed25519”.

Add

Add a witness URL to the identity configuration.

Fields

url: String

Witness server URL (e.g., “http://127.0.0.1:3333”).

Remove

Remove a witness URL from the identity configuration.

Fields

url: String

Witness server URL to remove.

List

List configured witnesses for the current identity.

Trait Implementations

impl Clone for WitnessSubcommand

fn clone(&self) -> WitnessSubcommand

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for WitnessSubcommand

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl FromArgMatches for WitnessSubcommand

fn from_arg_matches(__clap_arg_matches: &ArgMatches) -> Result<Self, Error>

Instantiate Self from ArgMatches, parsing the arguments as needed.

fn from_arg_matches_mut( __clap_arg_matches: &mut ArgMatches, ) -> Result<Self, Error>

Instantiate Self from ArgMatches, parsing the arguments as needed.

fn update_from_arg_matches( &mut self, __clap_arg_matches: &ArgMatches, ) -> Result<(), Error>

Assign values from ArgMatches to self.

fn update_from_arg_matches_mut<'b>( &mut self, __clap_arg_matches: &mut ArgMatches, ) -> Result<(), Error>

Assign values from ArgMatches to self.

impl Subcommand for WitnessSubcommand

fn augment_subcommands<'b>(__clap_app: Command) -> Command

Append to Command so it can instantiate Self via FromArgMatches::from_arg_matches_mut

fn augment_subcommands_for_update<'b>(__clap_app: Command) -> Command

Append to Command so it can instantiate self via FromArgMatches::update_from_arg_matches_mut

fn has_subcommand(__clap_name: &str) -> bool

Test whether Self can parse a specific subcommand