CLICommands
vault
snug vault <COMMAND>Time-Locked Attestation Vault: seal, reveal, witness, and lottery.
Subcommands
| Command | What it does |
|---|---|
seal | Seal an attestation with a time-lock or multi-signature reveal policy |
list | List your own attestations |
status | Check an attestation's lock status and unlock progress |
unlock | Attempt to unlock an attestation |
witness | Add a witness attestation toward early unlock (signature is server-generated) |
lottery-enter | Enter the probabilistic early-reveal lottery |
history | Retrieve the immutable audit history of an attestation |
Run snug vault <command> --help for that command's own options.
The global options apply everywhere.
Examples
snug vault seal --content-type signed_document --data "$(echo -n secret | base64)" --unlock-at 2030-01-01T00:00:00Z
snug vault seal --content-type report --data "$(echo -n secret | base64)" --lock-type multi_signature --required-signatures 2 --authorized-signers alice,bob
snug vault list --status locked
snug vault status --attestation-id vault_att_xyz
snug vault unlock --attestation-id vault_att_xyz --unlock-type time_expired --key-shares <holder_share>
snug vault unlock --attestation-id vault_att_xyz --unlock-type multi_signature --signature <sig> --key-shares <holder_share>
snug vault witness --attestation-id vault_att_xyz --reason "emergency disclosure"
snug vault lottery-enter --attestation-id vault_att_xyz --entry-count 10
snug vault history --attestation-id vault_att_xyzNext
- vault guide - what the service does and when to reach for it.
- API reference - every endpoint these commands call.
- CLI reference - global options, output modes, and exit codes.