scheme-admin

Overview ¶

Command scheme-admin is the deployer-side confirmation path for varwof/scheme-admin-v1. It reads immutable artifacts, verifies the detached PKCS#7 signature over the exact package bytes, and recomputes authority locally. It never trusts a member of an artifact that claims a result.

Usage:

scheme-admin check        --package P --transition T [--definition D] [--declaration C]
                          --signature S --transition-signature TS --trust ROOTS --policy P.json
                          [--state S.json] [--state-out S2.json]
                          (repeat --signature for a root threshold)
scheme-admin root-rotate  ...  (the same inputs; the transition action must be root-rotate)
scheme-admin delegation   --delegation D.json --declaration C --signature D.p7s --trust roots.pem [--policy P.json]
scheme-admin operation    --package P --transition T
scheme-admin keyid        --cert CERT.pem

Exit status: 0 accept, 2 reject, 1 usage or I/O failure.