# Workflow: paid user binds an annotation to the server (sync + verified_outcome)
Source: `../aretta-sdk/docs/diagrams/01-lifecycle.mmd` § "3 · Server binding (paid; when ready to upstream)".
Walks the paid-tier binding flow: `aristo auth login` → `aristo sync` (server matches the annotation against its property template, applies the `aristos:` namespace prefix in source, populates `linked` + `verified_outcome` in the index) → `aristo show` confirms the certificate.
The interactive bits of `auth login` (browser flow, etc.) are stubbed in `[..]` here; the activated form will use a fixture credential or `--token <env-var>` for non-interactive testing.
```console
$ aristo auth login
[..]
ok: authenticated as [..] (Pro tier).
$ aristo sync
→ Authenticating with aretta.dev … ok (Pro tier)
→ Uploading 1 unbound annotation for template matching …
→ Server matched 1 annotation against property template `bt_balance_invariant_v1`
→ Applying `aristos:` namespace prefix in source (atomic) … src/btree.rs:[..]
→ Writing linked + verified_outcome to index entry …
ok: 1 annotation bound.
• aristos:rebalance_invariant linked: arta_[..] status: verified
$ aristo show aristos:rebalance_invariant
aristos:rebalance_invariant (intent)
status: verified ✓
verify: "full" (method used: refinement-proof)
[..]
Verification certificate:
verified_outcome: v1:[..]
signed_at: [..]
commit_hash: [..] (HEAD)
signature: Ed25519, valid against bundled public key (scheme v[..])
[..]
```