Commands / kosa8 snapshot verify

kosa8 snapshot verify

Check a sealed snapshot against its seal and name any file that changed

Usage

kosa8 verify SNAPSHOT

Recomputes the SHA-256 of every file in the snapshot, checks the Ed25519 signature, and checks the seal against the audit log: the entry it is anchored to must still be there, and the seal the log recorded must be this one. Exits non-zero if anything does not match.

--pubkey pins the key the seal must be signed with. Without it, a valid signature proves only that the key inside seal.json signed it.

Options