CLI reference

Every command in @aarmos/cli (v0.43.0). Run aarmos <command> --help for flags. Not installed yet? Install the CLI.

Set up

Get a workspace, keys, and device identity in place.

  • aarmos init

    Scaffold a policy, config, and demo agent.

  • aarmos doctor

    Diagnose environment, config, and connectivity.

  • aarmos keys

    Generate and inspect signing keys.

  • aarmos identity

    Show and manage the workspace identity.

  • aarmos device

    Register and list trusted devices.

  • aarmos invite

    Create and redeem workspace invites.

Run under policy

Put real agent traffic through the gate.

  • aarmos run <target>

    Run a command with the policy gate attached.

  • aarmos proxy

    Start the hostname-scoped egress proxy.

  • aarmos daemon

    Run the local runtime as a background service.

  • aarmos demo

    Run the bundled demo agent end to end.

  • aarmos resume

    Resume a suspended governed session.

Author policy

Record what your agent does, then turn it into enforceable rules.

  • aarmos record -- <cmd>

    Observe a run in shadow mode.

  • aarmos synth --from <file>

    Synthesize a candidate policy from a recording.

  • aarmos policy promote

    Sign and promote a reviewed candidate.

  • aarmos lint

    Validate ASP policy YAML.

  • aarmos test

    Run policy test cases.

  • aarmos eval

    Evaluate a request against the active policy.

Prove

Verification, replay, and attestation — all offline-capable.

  • aarmos verify <path>

    Verify a receipt or .avar.zip bundle.

  • aarmos replay

    Deterministically replay a recorded decision.

  • aarmos anchor

    Anchor evidence to an external transparency log.

  • aarmos attest

    Produce a signed attestation for CI.

  • aarmos trust

    Inspect trust roots and their lifecycle.

  • aarmos preflight

    Pre-merge governance checks.

Operate

Continuity, incidents, and day-two operations.

  • aarmos grp

    Create and inspect Governance Recovery Points.

  • aarmos backup

    Replicate evidence to your own storage sink.

  • aarmos restore

    Restore governance state from a recovery point.

  • aarmos governance

    Inspect change sets and authority state.

  • aarmos authority

    Manage authority succession and forks.

  • aarmos boundary

    Inspect trust boundaries and credential custody.

  • aarmos incident

    Assemble an incident evidence package.

  • aarmos contracts

    Show operational contracts and current posture.

  • aarmos soak

    Long-running load and stability check.

  • aarmos telemetry

    Inspect or disable local telemetry settings.

Related