assay-cli 3.35.0

Policy-as-code gate for MCP agent tool calls, with verifiable evidence and Linux kernel enforcement.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36

use std::path::PathBuf;

/// Project assay runtime evidence into the OTel GenAI + OpenInference attribute view.
///
/// Read-only, one-directional, lossy: assay artifacts are the source of truth and the output is a
/// standards-shaped view of them. The CLI only reads files, deserializes JSON, and calls the library
/// projector; all projection semantics live in `assay_core::otel::projection`. See
/// `docs/reference/otel-projection.md`.
#[derive(clap::Args, Debug, Clone)]
pub struct ProjectOtelArgs {
    /// Path to an `assay.runner.capability_surface.v0` JSON file. Mutually exclusive with
    /// `--evidence-bundle`; exactly one input is required.
    #[arg(long = "capability-surface", conflicts_with = "evidence_bundle")]
    pub capability_surface: Option<PathBuf>,

    /// EXPERIMENTAL: project verified tool-decision-truth recipe rows from an evidence bundle (.tar.gz).
    /// The bundle is verified first; nothing is written unless every row verifies.
    #[arg(
        long = "evidence-bundle",
        conflicts_with_all = ["capability_surface", "observation_health", "enforcement_health"]
    )]
    pub evidence_bundle: Option<PathBuf>,

    /// Optional path to an `assay.runner.observation_health.v0` JSON file.
    #[arg(long = "observation-health", conflicts_with = "evidence_bundle")]
    pub observation_health: Option<PathBuf>,

    /// Optional path to an `assay.enforcement_health.v0` JSON file. Absent means no enforcement
    /// claim is made (it does NOT assert that enforcement was absent — that lives in the carrier).
    #[arg(long = "enforcement-health", conflicts_with = "evidence_bundle")]
    pub enforcement_health: Option<PathBuf>,

    /// Write the projection JSON here instead of stdout. On success stdout stays empty.
    #[arg(long = "out")]
    pub out: Option<PathBuf>,
}