Commands¶

kveritas <command> [flags]
kveritas <command> --help

Basics¶

init¶

Start in your project folder.

kveritas init [flags]

Flag	Default
`--disclosure`	`redacted`	`redacted`, `names`, or `open`.
`--show-names`		Same as `--disclosure names`.
`--local`		Sign with a local key, no server. SELF-ATTESTED.
`--server`	hosted server	Attestation server URL.
`--harness`		Record an agent session.
`--agent`	`unknown-agent`	Agent identity (harness).
`--operator`	current user	Operator identity (harness).
`--designate`	all consequential actions	Designation policy file (harness).

run¶

Run a command.

kveritas run [--files f1,f2] -- <command> [args...]

Flag
`--files`	Extra source files to hash, comma separated.

seal¶

Write the signed report.

kveritas seal [-o report.pdf]

Flag	Default
`-o, --output`	`kveritas-report-<id>.pdf`	Report path. Agent sessions: a `.json` path.
`--local-key`		Local RSA private key PEM, for offline signing.

Waits until every run has reached the server.

status¶

kveritas status

Shows the current session.

clean¶

kveritas clean

Deletes the session.

Checking¶

verify¶

kveritas verify <report.pdf | session.json | proof.json> [flags]

Flag	Default
`--bundle`		Code bundle: match check and AI code audit.
`--paper`		Manuscript: paper vs report check.
`--offline`		Local checks only.
`--public-key`	pinned K-Veritas key	Trust anchor PEM.
`--server`	`https://kveritas.org`	Server for the audit.

check¶

kveritas check --claims claims.json --report report.pdf

Compares a claims file with the report. See Extra checks.

generate-claims¶

kveritas generate-claims --report report.pdf > claims.json

Makes a claims file from a report.

prove¶

kveritas prove <report.pdf> <file> [file...] [flags]

Flag	Default
`-o, --output`	`kveritas-proof.json`	Proof path.
`--project`	current folder	Folder holding the files.

Needs report.pdf.provkey.json next to the report.

verify-proof¶

kveritas verify-proof <proof.json>
kveritas verify-proof <report.pdf> <proof.json>

checkout¶

kveritas checkout <bundle.zip> <[run:]phase | index> <outdir> [--report report.pdf]

Flag
`--report`	Check the bundle against the report before writing.

AI agents¶

record¶

Log one agent action. Usually called for you.

kveritas record --type <type> [flags]

Flag	Default
`--type`		`tool_call`, `file_effect`, `model_turn`, `spawn`, `self_claim`.
`--actor`	`agent`	Acting agent.
`--parent`		Parent actor, for sub-agents.
`--input`, `--input-file`		Input content to hash.
`--output`, `--output-file`		Output content to hash.
`--hook`		Claude Code hook mode: `pre`, `post`, `prompt`. Reads the payload from stdin.

harness-prove¶

kveritas harness-prove <session.json> <index | --tool-use-id ID> [flags]

Flag	Default
`--input`		File with the input to reveal.
`--output-content`		File with the output to reveal.
`--tool-use-id`		Select the entry by tool use ID.
`-o, --out`	`harness-proof-<index>.json`	Proof path.

verify-harness-proof¶

kveritas verify-harness-proof <proof.json>

More¶

Command
`kveritas update`	Install the latest release.
`kveritas completion <shell>`	Shell completion script.
`kveritas help [command]`	Help.