Quickstart: verify on the command line
confium verify signatif \
--artifact cnml-cert.json \
--bundle nmi-bundle.json \
--graph nmi-graph.json \
--registry cnml-registry.json \
--accept verified,attested \
--transparency --time \
--time-attested-at "$(date -u +%Y-%m-%dT%H:%M:%SZ)"
The command prints the coverage report and decision:
{
"label": "attested",
"accept": true,
"coverage": {
"hard_checks": "pass",
"dimensions_verified": ["data", "person"],
"paths_found": 2,
"downgrades": []
}
}
Exit codes: 0 accepted, 2 rejected (with the report printed),
1 usage or input error. --registry is optional (default registry
values). The fleet verifies Ed25519 and ECDSA-P256 components.