saphan actor
Manages the people who sign decisions: this workspace's signing key and the list of enrolled actors.
Manages the people who sign decisions: this workspace's signing key and the list of enrolled actors.
saphan actor init
Creates this workspace's signing key in <workspace>/.saphan/secret (readable only by you), which the owner's decision commands (saphan gate, saphan merge) use to sign every decision; they refuse to run without one. It never replaces an existing key file, even a damaged one (workspace-key-exists), because a new key would orphan every decision already signed; a broken key is restored or removed by hand. It never prints the key itself, only its key-id. Creating the key does not enrol it: afterwards run saphan identity enroll --kind actor --subject <name> --key-id <key-id>.
saphan actor list
Lists the enrolled actors with their key-ids and status, marks the one matching this workspace's key, and never shows the key itself. A key file that other users can read is refused, with the chmod that fixes it. It also reports every actor name already recorded in the gate history and whether the next decision under that name would be refused; this report is only complete when its status reads read. It changes nothing.
Global options apply to every command — see Every command.
saphan account
Lists the AI vendor accounts the installation has observed through its seats' usage readings, and lets you give them readable names.
saphan ask
Asks the engine a typed question about a machine and its capabilities, from a request file that can be reviewed and replayed, and reads the receipt an answer was released under.