saphan gates
Lists the recorded gate decisions — time, stream, gate, actor, decision, reference and detail — and checks each row's signature.
Lists the recorded gate decisions — time, stream, gate, actor, decision, reference and detail — and checks each row's signature. It opens the state database read-only, so it cannot change anything, and you never need to copy the database file to read it.
Each row reads ok (the signature verifies), absent (a row recorded before signing began, which is history, not a failure) or mismatch (a later row that fails verification or carries no signature; the failing step is named), and each row says which signing regime it belongs to. The command exits 2 if any row is a mismatch. ⚠ What ok proves depends on the regime: a row signed with a person's passkey or a seat's key proves that holder approved those exact bytes; a row signed with the workspace key proves only that the workspace key wrote it, not which person acted.
| flag | type | default | what it does |
|---|---|---|---|
--gate-id | string | When connected to a gateway, show one gate with the evidence the decision rests on, by its ID; refused on a local installation. | |
--stream | string | Show only this stream's rows instead of the whole log. |
Global options apply to every command — see Every command.