Skip to main content

fleetforge-ctl (CLI)

fleetforge-ctl is the CLI for interacting with the Trust Mesh. Install it locally or run it from the toolbox image; every command mirrors the Hello Fleet walkthrough so Platform/AI Infra reviewers can reproduce receipts outside the UI.

Demo cheat sheet

fleetforge-ctl receipt --run-id <RUN_ID> \
--manifest build/receipts/<RUN_ID>.c2pa.json
fleetforge-ctl verify tmp/hello-fleet/artifacts/demo-output.bin \
--manifest tmp/hello-fleet/artifacts/demo-output.bin.c2pa.json
fleetforge-ctl replay <RUN_ID>

Installation

cargo install --path core/ctl
# or use the toolbox image
just tool docker-run fleetforge-ctl -- --help

Core commands

CommandDescription
fleetforge-ctl runs list --adapter langgraphStream recent runs for a specific adapter.
fleetforge-ctl replay --run-id RUN_123Deterministically replay all steps.
fleetforge-ctl replay --run-id RUN_123 --from-checkpoint planner/02Resume from a checkpoint.
fleetforge-ctl receipt --run-id RUN_123 --output receipts/RUN_123.c2pa.jsonExport receipts for offline verification.
fleetforge-ctl verify artifact.ext --manifest receipts/RUN_123.c2pa.jsonVerify capability + manifest signatures offline.
fleetforge-ctl aibom export --run-id RUN_123Produce an AI Bill of Materials.
fleetforge-ctl policy import --engine opa-bundle --bundle bundle.tar.gzLoad external policy packs with provenance.
fleetforge-ctl policy inspect <PACK>Print provenance metadata for imported packs.

Environment flags

  • FLEETFORGE_POLICY_PACK – choose the policy pack (default, regulated, custom pack name).
  • FLEETFORGE_POLICY_DEFAULT – inline JSON overrides for demos/tests.
  • FLEETFORGE_SDK_API_VERSION / RUNTIME_CONNECT_HTTP_VERSION – override the SDK API version when infra requires HTTP/1.1.
  • FLEETFORGE_TRANSPARENCY_WRITER – enable SCITT receipts while exporting bundles.

Demo alignment

  1. Run the Hello Fleet quickstart.
  2. Copy the emitted run_id into /demo and the CLI snippets so reviewers see parity between UI and CLI receipts.
  3. Screenshare the CLI when Security / Risk ask to prove guardrails, provenance, or deterministic replay.

Update this page whenever new CLI surfaces land so the single source of truth stays in sync with the product story.