cmd/

Command auditverify is the operator/auditor-facing tool for the audit log's tamper-evidence guarantee (internal/audit's hash chain): point it at any exported audit.log and it reports whether the chain is intact, or names the exact line/sequence number where it breaks.

Command blastradius answers one question, with no setup and no integration: how much damage can this agent's tools actually do?

Command devtoken mints a dev-only signed identity JWT for local testing.

Command loadtest is the concurrent-load + latency benchmark harness.

Command mockupstream plays "the real enterprise service": it never trusts the proxy blindly, it verifies each capability token itself - a biscuit token's full signature chain plus its appended checks (internal/capability.Verify).

Command proxy is the JIT capability firewall itself: loads the tool registry and policy bundle, then serves both the REST and MCP adapters against the same transport-agnostic handler.