Struct UnifiedVerifyCommand 

pub struct UnifiedVerifyCommand {
    pub target: String,
    pub identity_bundle: Option<PathBuf>,
    pub issuer_pk: Option<String>,
    pub issuer_did: Option<String>,
    pub witness_receipts: Option<PathBuf>,
    pub witness_threshold: usize,
    pub witness_keys: Vec<String>,
    pub signature: Option<PathBuf>,
    pub remote: Option<String>,
    pub oobi: Option<String>,
    pub require_witnesses: bool,
}

Unified verify command: verifies a signed commit or an attestation.

Fields

target: String

Git ref, commit hash, range (e.g. HEAD, abc1234, main..HEAD), or path to an attestation JSON file / “-” for stdin.

identity_bundle: Option<PathBuf>

Path to identity bundle JSON (for CI/CD stateless commit verification).

issuer_pk: Option<String>

Signer public key in hex format (attestation verification).

issuer_did: Option<String>

Signer identity ID for attestation trust-based key resolution.

witness_receipts: Option<PathBuf>

Path to witness signatures JSON file.

witness_threshold: usize

Number of witnesses required.

witness_keys: Vec<String>

Witness public keys as DID:hex pairs.

signature: Option<PathBuf>

Path to signature file. Only used when verifying an artifact file (not a commit). Defaults to .auths.json.

remote: Option<String>

Fetch a signer’s KEL from this git remote when it is absent locally (opt-in). The local registry stays the trusted floor — a remote can only advance the key-state, never roll it back. Without it, resolution is local-only (no network).

oobi: Option<String>

Fetch signer KELs over HTTP from this OOBI base URL (SSRF-hardened: HTTPS-only, no redirects, private/loopback hosts blocked). Takes precedence over --remote.

require_witnesses: bool

Fail verification when the signer’s root KEL has not reached witness quorum (fail-closed). Default: warn and continue.

Trait Implementations

impl Args for UnifiedVerifyCommand

fn group_id() -> Option<Id>

Report the ArgGroup::id for this set of arguments

fn augment_args<'b>(__clap_app: Command) -> Command

Append to Command so it can instantiate Self via FromArgMatches::from_arg_matches_mut

fn augment_args_for_update<'b>(__clap_app: Command) -> Command

Append to Command so it can instantiate self via FromArgMatches::update_from_arg_matches_mut

impl Clone for UnifiedVerifyCommand

fn clone(&self) -> UnifiedVerifyCommand

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl CommandFactory for UnifiedVerifyCommand

fn command<'b>() -> Command

Build a Command that can instantiate Self.

fn command_for_update<'b>() -> Command

Build a Command that can update self.

impl Debug for UnifiedVerifyCommand

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl ExecutableCommand for UnifiedVerifyCommand

fn execute(&self, ctx: &CliConfig) -> Result<()>

impl FromArgMatches for UnifiedVerifyCommand

fn from_arg_matches(__clap_arg_matches: &ArgMatches) -> Result<Self, Error>

Instantiate Self from ArgMatches, parsing the arguments as needed.

fn from_arg_matches_mut( __clap_arg_matches: &mut ArgMatches, ) -> Result<Self, Error>

Instantiate Self from ArgMatches, parsing the arguments as needed.

fn update_from_arg_matches( &mut self, __clap_arg_matches: &ArgMatches, ) -> Result<(), Error>

Assign values from ArgMatches to self.

fn update_from_arg_matches_mut( &mut self, __clap_arg_matches: &mut ArgMatches, ) -> Result<(), Error>

Assign values from ArgMatches to self.

impl Parser for UnifiedVerifyCommand

fn parse() -> Self

Parse from std::env::args_os(), exit on error.

fn try_parse() -> Result<Self, Error>

Parse from std::env::args_os(), return Err on error.

fn parse_from<I, T>(itr: I) -> Self

where I: IntoIterator<Item = T>, T: Into<OsString> + Clone,

Parse from iterator, exit on error.

fn try_parse_from<I, T>(itr: I) -> Result<Self, Error>

where I: IntoIterator<Item = T>, T: Into<OsString> + Clone,

Parse from iterator, return Err on error.

fn update_from<I, T>(&mut self, itr: I)

where I: IntoIterator<Item = T>, T: Into<OsString> + Clone,

Update from iterator, exit on error.

fn try_update_from<I, T>(&mut self, itr: I) -> Result<(), Error>

where I: IntoIterator<Item = T>, T: Into<OsString> + Clone,

Update from iterator, return Err on error.