Commands / kosa8 validate sign
kosa8 validate sign
Sign a qualification record with your identity (21 CFR 11.50, 11.70)
Usage
kosa8 sign RECORD --meaning executed|reviewed|approved --reason TEXT
Adds a Part 11 signature to a record: your printed name (from your identity), the date and time, and the meaning of the signature, all inside the signed bytes, bound to the record by the digest of its signed manifest so it cannot be moved to another record.
executed the person who ran the qualification submits it; signed first reviewed a reviewer has checked it approved an approver accepts it
These are kosa8's signed approval records (kosa8 approve): the executor's
signature is a request naming the record, and each review and approval is an
approval of that request. The executor cannot review or approve their own
record. Signatures are written beside the record, in RECORD.signatures/.
Options
| Flag | Type | What it does | Default |
|---|---|---|---|
--identity | string | your identity directory (default ~/.kosa8/identity) | — |
--meaning | string | what your signature means: executed, reviewed or approved | — |
--pubkey | string | the public key the record package must be signed with | — |
--reason | string | why you sign (required for reviewed and approved; signed and shown beside your name) | — |
--signatures | string | where the record's signatures are kept (default RECORD.signatures beside it) | — |
--ttl | duration | executed only: how long the record stays open for review and approval | 720h0m0s |
-y, --yes | bool | sign without the confirmation prompt | — |
Example
kosa8 validate sign iq.tar --meaning executed --reason "executed per VP-12" kosa8 validate sign iq.tar --meaning reviewed --reason "items and deviations reviewed" kosa8 validate sign iq.tar --meaning approved --reason "approved for release, DEV-001 accepted per CAPA-88"