saphan tool
Admits tools to the tool catalogue: a tool-invocation record enters it only through tool admit.
Admits tools to the tool catalogue: a tool-invocation record enters it only through tool admit. Run it with a subcommand.
saphan tool admit
Runs a tool-invocation record (YAML or JSON) through the conformance gate and, if it passes, signs one admission row. The gate checks that the tool on this host is the pinned one (nothing is downloaded), runs the recorded command on a fresh copy of the fixture inside the egress wall, then checks its exit status, its output format and every host it contacted, stopping at the first failure. A host that cannot hold the egress wall is refused. Rehearse it with saphan dry-run tool admit.
| flag | type | default | what it does |
|---|---|---|---|
--root-key | string | The root private key that signs the admission row; defaults to ~/.saphan/trust/root.key. |
Global options apply to every command — see Every command.
saphan teardown
Archives a finished stream's channel files and records the teardown decision, the owner's recorded act that the stream's worktree may be removed.
saphan train
Shows and maintains trains: a train is a planned series of related work items, called wagons, declared in a train order and identified by its track name; each wagon is dispatched as its own stream.