Quickstart: verify on the command line

confium verify signatif \
  --artifact cnml-cert.json \
  --bundle nmi-bundle.json \
  --graph nmi-graph.json \
  --registry cnml-registry.json \
  --accept verified,attested \
  --transparency --time \
  --time-attested-at "$(date -u +%Y-%m-%dT%H:%M:%SZ)"

The command prints the coverage report and decision:

{
  "label": "attested",
  "accept": true,
  "coverage": {
    "hard_checks": "pass",
    "dimensions_verified": ["data", "person"],
    "paths_found": 2,
    "downgrades": []
  }
}

Exit codes: 0 accepted, 2 rejected (with the report printed), 1 usage or input error. --registry is optional (default registry values). The fleet verifies Ed25519 and ECDSA-P256 components.