Module trust_root 

gtc op env trust-root {list,add,remove} (C2 of plans/next-gen-deployment.md).

Wraps the typed trust-root verbs on LocalFsStore (Phase D PR-3a.2) in the operator-CLI shape so external callers can manage the per-env trust root without writing JSON by hand.

Structs

TrustRootAddPayload

Payload for op env trust-root add. Either inline public_key_pem OR a public_key_file path; one is required.

TrustRootBootstrapPayload

Payload for op env trust-root bootstrap.

TrustRootRemovePayload

Payload for op env trust-root remove.

Functions

add

op env trust-root add — validate the (key_id, public_pem) pair and persist it (idempotent on case-insensitive key_id).

bootstrap

op env trust-root bootstrap — load (or generate) the operator key and add its (key_id, public_pem) to the env trust root. This is the only seeded code path: the revenue-policy writer NEVER mutates the trust root, so revocation via remove is a durable boundary. Run once per env; subsequent runs with the same operator key are a no-op.

list

op env trust-root list <env_id> — return all trusted keys for the env.

remove

op env trust-root remove — silently no-ops if the key isn’t present.