cloud verify¶

NAME¶

phyware cloud verify — verify the hash-chain integrity of a PhyCloud dataset.

SYNOPSIS¶

phyware cloud verify [OPTIONS]

DESCRIPTION¶

Fetches the event hash-chain from PhyCloud and cryptographically verifies that every block is correctly linked to the previous one. Reports the first broken link (if any) and exits with code 0 on success, 1 on failure.

Useful in compliance workflows to produce tamper-evidence attestations.

OPTIONS¶

| --tenant-id | string | No | (active tenant) | — | | --from | string | No | — | — | | --to | string | No | — | — |

ARGUMENTS¶

None.

INPUT¶

None.

OUTPUT¶

Table (default) or JSON with fields:

EXIT CODES¶

EXAMPLES¶

# Basic verify (uses env vars)
phyware cloud verify

# Verify a specific tenant
phyware cloud verify --tenant-id ten_abc123

# Verify with JSON output
phyware cloud verify --output json

# Verify a date range
phyware cloud verify --from 2024-01-01 --to 2024-01-31

# Verify against a custom PhyCloud instance
phyware cloud verify --url https://cloud.phyware.io --api-key phk_live_...

AGENT NOTES¶

Use this command to produce tamper-evidence attestations before generating compliance reports. Always pass --output json for machine consumption. Requires read:events scope. If exit code is 1 and first_bad is non-null, the hash chain is broken — escalate to an administrator.

SEE ALSO¶

• cloud events list
• comp evaluate

ERRORS¶