evidence check command reference
Validate and compile the complete immutable bundle, and validate the mounted secret material exactly as startup does.
Contract status
Section titled “Contract status”This page is generated from the public Clap command tree for Registry Stack source version 0.34.0 and catalog SHA-256 c9eb944fbb64b3beca0250dc0dee945ea12d5c5f92ffeab2f7c21d9eeb888c6c. Hidden implementation commands are omitted.
evidence check [OPTIONS]Constraints
Section titled “Constraints”| Condition | Requirement |
|---|---|
--require-audit-under <ABSOLUTE_DIRECTORY> is present | --require-runtime-dependencies is required. |
Options
Section titled “Options”| Option | Always required | Default | Values | Environment | Description |
|---|---|---|---|---|---|
--require-runtime-dependencies | No | n/a | n/a | n/a | Also prove audit writability, signer readiness, source credentials, and access-token JWKS reachability in the target runtime context |
--require-audit-under <ABSOLUTE_DIRECTORY> | No | n/a | n/a | n/a | Also prove the configured audit sink resolves inside this absolute directory, which the deployment declares persistent. The declared root is a storage boundary, not a second audit setting. Evidence resolves its own configured destination exactly as startup resolves it and refuses when the result is not at or below the root, which is what stops a container from mounting durable storage at the conventional prefix while writing the chain somewhere ephemeral. |
--runtime <RUNTIME> | No | /etc/registry-evidence/runtime.yaml | n/a | REGISTRY_EVIDENCE_RUNTIME | One closed operator runtime file that binds the governed bundle |
-h, --help | No | n/a | n/a | n/a | Print help (see a summary with ‘-h’) |
Generation contract
Section titled “Generation contract”Run npm run generate from docs/site after changing a public command, argument, option, default, environment binding, or help description.