evidence verify command reference
Re-verify one stored signed response offline against a pinned key set.
Contract status
Section titled “Contract status”This page is generated from the public Clap command tree for Registry Stack source version 0.46.0 and catalog SHA-256 d43b1bf418e0b00fac52311fa3a106fa124512dbc88cf511475713af2d73aa47. Hidden implementation commands are omitted.
Description
Section titled “Description”Re-verify one stored signed response offline against a pinned key set. Exactly one stored response is named, and its format is named with it. The command never infers a format from the file’s contents, so a credential can never be re-verified under the other format’s rules.
evidence verify [OPTIONS] --jwks <JWKS> --policy <POLICY> <--jws <JWS>|--sd-jwt-vc <SD_JWT_VC>>Constraints
Section titled “Constraints”| Condition | Requirement |
|---|---|
| Command invocation | Exactly one of --jws <JWS>, --sd-jwt-vc <SD_JWT_VC> is required. |
| Command invocation | --jws <JWS> and --sd-jwt-vc <SD_JWT_VC> cannot be used together. |
Options
Section titled “Options”| Option | Always required | Default | Values | Environment | Description |
|---|---|---|---|---|---|
--jws <JWS> | No | n/a | n/a | n/a | Stored flattened JWS JSON response file |
--sd-jwt-vc <SD_JWT_VC> | No | n/a | n/a | n/a | Stored compact SD-JWT VC response file |
--jwks <JWKS> | Yes | n/a | n/a | n/a | Pinned trusted JWKS document. This file is the complete trust set |
--policy <POLICY> | Yes | n/a | n/a | n/a | Relying-procedure verification policy document |
--at <AT> | No | n/a | n/a | n/a | Verification instant as strict RFC 3339 UTC; system time by default |
-h, --help | No | n/a | n/a | n/a | Print help (see a summary with ‘-h’) |
Generation contract
Section titled “Generation contract”After changing a public command, argument, option, default, environment binding, or help description, run cargo run --locked -p registry-cli-docs -- --write, commit crates/registry-cli-docs/catalog.json, then run npm run generate from docs/site.