bootproof 0.3.0 → 0.4.1

package/dist/cli.js

@@ -1,16 +1,24 @@
 #!/usr/bin/env node
 import fs from "node:fs";
 import path from "node:path";
+import * as readline from "node:readline/promises";
 import { inferRepo } from "./infer.js";
 import { buildPlan, composeFileFor, envExampleFor } from "./plan.js";
 import { up } from "./run.js";
-import { verifySignature, attestationPath, TOOL_ID } from "./proof.js";
+import { attestationPath, currentGitHead, evaluateAttestationSignature, trustSigner, rotateSigner, writeAttestation, TOOL_ID, } from "./proof.js";
+import { emitLivingReceipt } from "./receipt.js";
 import { pollHealth } from "./exec.js";
-import { buildRegistryEntry, verifyRegistryEntry, writeRegistryEntry, registryEntryPath } from "./registry.js";
+import { buildExternalHealthAttestation } from "./external-health.js";
+import { agentPlanPath, buildAgentPlan, writeAgentPlan, } from "./agent-plan.js";
+import { agentRunDirectory, appendAgentVerification, createAgentRun, explainAgentRun, latestAgentRunId, readAgentRun, } from "./agent-run.js";
+import { buildFederatedReceipt, buildRegistryEntry, currentGitBranch, evaluateRegistryEntrySignature, writeFederatedReceipt, writeRegistryEntry, registryEntryPath, } from "./registry.js";
 import { normalizeDockerBindPath, detectHostPlatform } from "./platform.js";
 import { diagnoseFailure } from "./diagnosis.js";
 import { cloneRemoteTarget, isRemoteTarget, managedRemoteSource } from "./remote.js";
-import { applyVerifiedRepair, repairRepo, verifyRepairReceipt, } from "./repair.js";
+import { applyVerifiedRepair, executeAiSuggestedRepair, evaluateRepairReceiptSignature, latestDeterministicRepairCandidate, latestFailedAttestation, repairRepo, registeredRemediationsFor, verifyRepairReceipt, } from "./repair.js";
+import { requestAiRepairSuggestion, resolveAiProvider, } from "./ai-repair.js";
+import { exportSbom } from "./sbom.js";
+import { diffRefs } from "./diff.js";
 let GREEN = "\x1b[32m", YELLOW = "\x1b[33m", RED = "\x1b[31m", DIM = "\x1b[2m", BOLD = "\x1b[1m", RESET = "\x1b[0m";
 const ok = (s) => console.log(`${GREEN}\u2713 ${s}${RESET}`);
 const would = (s) => console.log(`${DIM}\u25cb would: ${s}${RESET}`);
@@ -18,7 +26,23 @@ const warn = (s) => console.log(`${YELLOW}! ${s}${RESET}`);
 const bad = (s) => console.log(`${RED}\u2717 ${s}${RESET}`);
 const disableColor = () => { GREEN = ""; YELLOW = ""; RED = ""; DIM = ""; BOLD = ""; RESET = ""; };
 const portableRelative = (from, to) => path.relative(from, to).replace(/\\/g, "/");
-const COMMANDS = ["up", "fix", "apply-repair", "analyze", "plan", "verify", "explain", "attest", "help", "version", "--help", "-h", "--version"];
+const COMMANDS = ["up", "verify-url", "plan-agent", "explain-run", "fix", "apply-repair", "diff", "analyze", "plan", "verify", "explain", "attest", "registry", "export-sbom", "rotate-keys", "help", "version", "--help", "-h", "--version"];
+const SUPPORTED_FLAGS = {
+    diff: new Set(["base", "head", "json", "ci"]),
+    analyze: new Set(["workspace", "json", "ci"]),
+    plan: new Set(["workspace", "provider", "ci"]),
+    "plan-agent": new Set(["json", "ci"]),
+    "explain-run": new Set(["ci"]),
+    "apply-repair": new Set(["receipt", "dry-run", "json", "ci"]),
+    fix: new Set(["provider", "unsafe-local", "port", "timeout", "dry-run", "json", "ci", "ai"]),
+    up: new Set(["provider", "unsafe-local", "install", "workspace", "port", "timeout", "dry-run", "json", "ci", "command", "external-health", "receipt", "health-path", "ci-oidc"]),
+    "verify-url": new Set(["timeout", "json", "ci"]),
+    verify: new Set(["ci", "trust-signer", "require-known-signer", "strict"]),
+    attest: new Set(["ci", "trust-signer", "require-known-signer", "strict"]),
+    registry: new Set(["mode", "federated", "ci"]),
+    "export-sbom": new Set(["format", "json", "ci"]),
+    "rotate-keys": new Set(["repo", "resign", "no-backup", "json", "ci"]),
+};
 void normalizeDockerBindPath;
 void detectHostPlatform; // exported surface, used by docker provider work in progress
 if (process.env.NO_COLOR !== undefined)
@@ -50,34 +74,66 @@ Usage:
   bootproof analyze <path|git-url> [--workspace dir] [--json]
                                                             inspect a repo, show evidence-based inference
   bootproof plan <path|git-url> [--workspace dir]           show the run plan and files that WOULD be generated
+  bootproof plan-agent <path|git-url> [--json]              write a risk-classified plan; execute nothing
+  bootproof explain-run <run-id>                            verify and explain a local agent receipt chain
   bootproof up <path|git-url> [options]                     execute the plan, verify localhost, write signed proof
+  bootproof verify-url <url> [--timeout ms]                 verify an externally managed HTTP service
   bootproof fix <path|git-url> [options]                    test a deterministic repair in a sandbox
+  bootproof fix <path|git-url> --ai                         optionally request a BYOK AI suggestion after deterministic refusal
   bootproof apply-repair <path> [--receipt proof.json]      explicitly apply a signature-valid verified file change
+  bootproof diff [--base ref] [--head ref] [--json]         statically detect infrastructure drift between Git refs
   bootproof verify <path|proof.json>                        validate an attestation or repair-receipt signature
   bootproof explain <proof.json>                            explain an attestation or repair receipt
-  bootproof attest export <path>                        redacted, re-signed shareable registry entry (never uploads)
-  bootproof attest check <path>                         verify a registry entry signature
+  bootproof registry export <path>                          explicitly write a redacted local registry export
+  bootproof registry export <path> --federated              explicitly write a public-candidate receipt
+  bootproof attest export <path>                            compatibility alias for local registry export
+  bootproof attest check <path>                             verify a registry entry signature
+  bootproof export-sbom <path> [--format cyclonedx-json]    export a CycloneDX SBOM from package-lock.json
+  bootproof rotate-keys [--repo <path>] [--resign]          rotate the local ed25519 signing key (back up old, generate new)
   bootproof version
 
 Options for up:
   --provider docker|local   execution provider (default docker)
-  --unsafe-local            required acknowledgement for --provider local
+      docker: only works for source-built Compose applications; refuses host commands for plain repos
+      local:  runs install/start commands directly on your host machine (requires --unsafe-local)
+  --unsafe-local            required consent for --provider local; confirms you accept host execution
   --install                 run the dependency install step (off by default)
   --workspace <dir>         pick a monorepo workspace
+  --command <command>       override the inferred application start command
+  --external-health <url>   verify an externally managed service; do not start the app
   --port <n>                override inferred port
+  --health-path <path>      override inferred health endpoint path (e.g. /health, /healthz)
   --timeout <ms>            health verification timeout (default 60000)
   --dry-run                 show what would happen; executes nothing, writes nothing
   --json                    one bootproof/result/v1 JSON object on stdout
   --ci                      no prompts, colours, or interactive UI; fail closed
+  --receipt                 write a self-verifying Living Receipt HTML to .bootproof/living-receipt.html
+  --ci-oidc                 fetch GitHub Actions OIDC token and sign at ci_oidc_signed trust level (requires permissions: id-token: write)
 
 Options for fix:
-  --provider docker|local   execution provider (default docker)
-  --unsafe-local            required acknowledgement for local sandbox execution
+  --provider docker|local   execution provider (default docker; docker only works for Compose apps)
+  --unsafe-local            required consent for --provider local; confirms you accept host execution
   --port <n>                override inferred application port
   --timeout <ms>            before/after health timeout (default 60000)
+  --ai                      optional BYOK suggestion after no deterministic repair is known
   --dry-run                 execute nothing, write nothing, produce no repair proof
   --json                    one bootproof/repair-result/v1 object on stdout
 
+Command repairs show the exact command and require the literal response Y before execution.
+JSON and CI modes never prompt and never approve a command.
+AI uses OPENAI_API_KEY or ANTHROPIC_API_KEY directly with native fetch. It sends only
+redacted structured failure evidence after explicit consent and never runs inside bootproof up.
+
+Options for diff:
+  --base <ref>             base Git commit (default HEAD^)
+  --head <ref>             head Git commit (default HEAD)
+  --json                   one bootproof/diff-result/v1 JSON object on stdout
+
+Options for verify and attest check:
+  --trust-signer           explicitly pin an intact foreign signer in ~/.bootproof/known_signers.json
+  --require-known-signer   fail when the signer is not this machine or explicitly pinned
+  --strict                 require a known signer and fail directory verification on commit mismatch
+
 Honesty contract: no green check without an observed event; dry runs say "would";
 .env/.env.local are never written; secrets are never invented.
 Remote execution requires --provider local --unsafe-local. docs/HONESTY_CONTRACT.md`);
@@ -105,6 +161,8 @@ function printInference(inf) {
         console.log(`  backend command: ${inf.backendCommand}`);
     if (inf.frontendCommand)
         console.log(`  frontend command: ${inf.frontendCommand}`);
+    if (inf.asset_dev_server_command)
+        console.log(`  asset dev server command: ${inf.asset_dev_server_command}`);
     if (inf.workerCommand)
         console.log(`  worker command: ${inf.workerCommand}`);
     if (inf.appCommand)
@@ -113,6 +171,9 @@ function printInference(inf) {
         console.log(`  preparation: ${inf.preparationCommands.map(command => command.command).join("; ")}`);
     console.log(`  command scope: ${inf.commandScope}`);
     console.log(`  port: ${inf.port} ${DIM}(${inf.portEvidence})${RESET}`);
+    if (inf.observedPort !== null)
+        console.log(`  observed port: ${inf.observedPort}`);
+    console.log(`  health candidate source: ${inf.healthCandidateSource}`);
     if (inf.healthCandidates.length)
         console.log(`  health candidates: ${inf.healthCandidates.join(", ")}`);
     if (inf.services.length)
@@ -157,6 +218,84 @@ function machineFailure(explanation) {
         writtenFiles: [],
     };
 }
+function externalMachineResult(attestation, evidencePath) {
+    return {
+        schema: "bootproof/result/v1",
+        booted: false,
+        healthVerified: attestation.result.healthVerified,
+        failureClass: attestation.result.failureClass,
+        classification: attestation.classification,
+        verificationMode: attestation.verificationMode,
+        bootproofOrchestrated: attestation.bootproofOrchestrated,
+        externalHealthUrl: attestation.externalHealthUrl,
+        observedStatus: attestation.observedStatus,
+        observedFinalUrl: attestation.observedFinalUrl,
+        observedAt: attestation.observedAt,
+        responseSnippet: attestation.responseSnippet,
+        attestationPath: evidencePath,
+        plan: attestation.plan,
+        observed: attestation.observed,
+        explanation: attestation.result.explanation,
+        trust: attestation.trust,
+        writtenFiles: evidencePath ? [evidencePath] : [],
+    };
+}
+function printExternalHealthResult(attestation, evidencePath) {
+    const result = attestation.result;
+    if (result.healthVerified) {
+        ok(`${BOLD}EXTERNAL SERVICE VERIFIED${RESET}${GREEN} — ${result.healthObservation} (observed, signed)`);
+    }
+    else {
+        bad(`${BOLD}NOT VERIFIED${RESET}${RED} — ${attestation.classification}`);
+        if (attestation.observedStatus !== null) {
+            console.log(`Observed: HTTP ${attestation.observedStatus} at ${attestation.observedFinalUrl}`);
+        }
+        const connectionError = result.healthEvidence?.connectionError;
+        if (connectionError)
+            console.log(`Connection error: ${connectionError}`);
+    }
+    console.log("Ownership: externally managed (bootproofOrchestrated=false).");
+    if (evidencePath)
+        console.log(`Evidence: ${evidencePath}`);
+}
+function printAgentPlan(plan, outputPath, runId, runPath) {
+    console.log(`${BOLD}Agent plan (planning only)${RESET}`);
+    if (plan.classifications.length)
+        console.log(`Classifications: ${plan.classifications.join(", ")}`);
+    console.log(`Current failure class: ${plan.currentFailureClass || "none established"}`);
+    console.log(`Suspected stack: ${plan.suspectedStack.length ? plan.suspectedStack.join(", ") : "none established"}`);
+    console.log(`BootProof direct orchestration: ${plan.canBootProofOrchestrateDirectly ? "available" : "not established"}`);
+    console.log(`External health verification: ${plan.canBootProofVerifyExternally ? "available" : "not established"}`);
+    if (plan.missingTools.length)
+        console.log(`Missing tools: ${plan.missingTools.join(", ")}`);
+    if (plan.observedEvidence.length) {
+        console.log("Observed evidence:");
+        for (const evidence of plan.observedEvidence)
+            console.log(`  - ${evidence}`);
+    }
+    if (plan.candidateNextActions.length) {
+        console.log("Candidate next actions:");
+        for (const [index, candidate] of plan.candidateNextActions.entries()) {
+            console.log(`  ${index + 1}. ${candidate.classification}`);
+            if (candidate.command)
+                console.log(`     Command: ${candidate.command}`);
+            console.log(`     Reason: ${candidate.reason}`);
+            console.log(`     Risk: ${candidate.riskLevel}`);
+            console.log(`     Mutation scope: ${candidate.mutationScope}`);
+            console.log(`     Approval required: ${candidate.requiresApproval ? "yes" : "no"}`);
+            console.log(`     Approval: ${candidate.approvalPrompt}`);
+            if (candidate.blockedReason)
+                console.log(`     Blocked: ${candidate.blockedReason}`);
+            if (candidate.secretSensitive)
+                console.log("     Secret-sensitive: yes; command output must not be saved");
+            console.log(`     Verify after action: ${candidate.verificationStep}`);
+            console.log(`     Stop condition: ${candidate.stopCondition}`);
+        }
+    }
+    console.log(`Plan: ${outputPath}`);
+    console.log(`Agent run: ${runId} (${runPath})`);
+    console.log("No candidate action was executed. Verification remains pending.");
+}
 function printFailure(failureClass, diagnosis, evidencePath) {
     bad(`${BOLD}NOT VERIFIED${RESET}${RED} — ${failureClass}`);
     console.log(`What happened: ${diagnosis.whatHappened}`);
@@ -167,6 +306,67 @@ function printFailure(failureClass, diagnosis, evidencePath) {
 function isRepairReceipt(value) {
     return Boolean(value && typeof value === "object" && value.schema === "bootproof/repair-receipt/v1");
 }
+function signatureTrustText(result) {
+    if (!result.integrityValid || result.tier === "invalid")
+        return "signature INVALID";
+    if (result.tier === "self")
+        return "signature intact, signer: this machine";
+    if (result.tier === "known") {
+        return `signature intact, signer: known (${result.label ?? result.fingerprint})`;
+    }
+    return "signature intact, signer: UNKNOWN — integrity only, not a trusted signer";
+}
+function printSignatureTrust(result) {
+    const message = signatureTrustText(result);
+    if (!result.integrityValid)
+        bad(message);
+    else if (result.tier === "unknown-foreign")
+        warn(message);
+    else
+        ok(message);
+}
+function maybeTrustSigner(result, publicKey, requested, reevaluate) {
+    if (!requested || !result.integrityValid || result.tier !== "unknown-foreign" || !publicKey)
+        return result;
+    console.log(`Trusting signer: ${result.fingerprint}`);
+    trustSigner(publicKey);
+    return reevaluate();
+}
+function signerTrustFails(result, requireKnown) {
+    return !result.integrityValid || (requireKnown && result.tier === "unknown-foreign");
+}
+function commitMismatchMessage(attestation, repo) {
+    const head = currentGitHead(repo);
+    if (!head || attestation.repo.commit === head)
+        return null;
+    const attested = attestation.repo.commit?.slice(0, 8) ?? "none";
+    return `This attestation does not describe the repository's current commit (${attested} vs ${head.slice(0, 8)}); it is not proof of the current working tree.`;
+}
+function optionalRepairReceipt(repo) {
+    const receipt = path.join(repo, ".bootproof", "repair-receipt.json");
+    if (!fs.existsSync(receipt))
+        return null;
+    try {
+        const value = JSON.parse(fs.readFileSync(receipt, "utf8"));
+        return isRepairReceipt(value) && verifyRepairReceipt(value) ? value : null;
+    }
+    catch {
+        return null;
+    }
+}
+function registryEntryFor(repo, registryMode) {
+    const ap = attestationPath(repo);
+    if (!fs.existsSync(ap))
+        return null;
+    const att = JSON.parse(fs.readFileSync(ap, "utf8"));
+    return buildRegistryEntry(att, {
+        registryMode,
+        inference: inferRepo(repo),
+        repairReceipt: optionalRepairReceipt(repo),
+        branch: currentGitBranch(repo),
+        sign: true,
+    });
+}
 function printRepairResult(result) {
     if (result.repaired) {
         ok(`${BOLD}VERIFIED REPAIR${RESET}${GREEN} — ${result.repairId}`);
@@ -179,6 +379,83 @@ function printRepairResult(result) {
     }
     bad(`${BOLD}NO VERIFIED REPAIR${RESET}${RED}${result.failureClass ? ` — ${result.failureClass}` : ""}`);
     console.log(result.explanation);
+    if (result.receiptPath)
+        console.log(`Receipt: ${result.receiptPath}`);
+}
+async function commandRepairApproval(action) {
+    console.log(action.approvalPrompt);
+    console.log(`Command: ${action.command.display}`);
+    console.log(`Mutation scope: ${action.mutationScope}`);
+    console.log(`Risk: ${action.riskLevel}`);
+    const prompt = readline.createInterface({ input: process.stdin, output: process.stdout });
+    try {
+        return await prompt.question("Run this command? Type Y to approve: ") === "Y";
+    }
+    finally {
+        prompt.close();
+    }
+}
+async function patchRepairApproval(action) {
+    console.log(action.approvalPrompt);
+    const prompt = readline.createInterface({ input: process.stdin, output: process.stdout });
+    try {
+        return await prompt.question("Test this patch in the repair sandbox? Type Y to approve: ") === "Y";
+    }
+    finally {
+        prompt.close();
+    }
+}
+function printAiRepairCandidate(requested) {
+    const action = requested.action;
+    console.log(`${BOLD}AI-suggested unverified repair${RESET}`);
+    console.log(`Provider: ${requested.provider} (${requested.model})`);
+    console.log(`Failure: ${requested.suggestion.failure_class}`);
+    console.log(`Confidence reported by provider: ${requested.suggestion.confidence}`);
+    console.log(`Explanation: ${requested.suggestion.explanation_for_user}`);
+    console.log(`Provider safety rationale (unverified): ${requested.suggestion.why_this_is_safe}`);
+    if (action.command)
+        console.log(`Command: ${action.command.display}`);
+    if (action.instruction)
+        console.log(`Instruction: ${action.instruction}`);
+    if (action.patch)
+        console.log(`Patch preview:\n${action.patch.content}`);
+    console.log(`Mutation scope: ${action.mutationScope}`);
+    console.log(`Risk: ${action.riskLevel}`);
+    console.log(`Approval: ${action.approvalPrompt}`);
+    console.log(`Verify after action: ${action.verificationStep}`);
+    console.log("Source: ai_suggested_unverified. AI has not proved this repair.");
+}
+async function aiRepairApproval(action, prompt) {
+    if (action.actionType === "command") {
+        return await prompt.question("Run this AI-suggested command? Type Y to approve: ") === "Y";
+    }
+    if (action.actionType === "patch") {
+        return await prompt.question("Test this AI-suggested patch in the repair sandbox? Type Y to approve: ") === "Y";
+    }
+    return await prompt.question("Approve recording this AI-suggested instruction? Type Y to approve: ") === "Y";
+}
+function printRepairCandidate(candidate) {
+    if (!candidate)
+        return;
+    const action = candidate.candidate.action;
+    console.log(`${BOLD}Deterministic repair candidate${RESET}`);
+    console.log(`Failure: ${candidate.candidate.failureClass}`);
+    if (action.command)
+        console.log(`Command: ${action.command.display}`);
+    if (action.instruction)
+        console.log(`Instruction: ${action.instruction}`);
+    if (action.patch)
+        console.log(`Patch preview:\n${action.patch.content}`);
+    console.log(`Mutation scope: ${action.mutationScope}`);
+    console.log(`Risk: ${action.riskLevel}`);
+    console.log(`Approval: ${action.approvalPrompt}`);
+    console.log(`Verify after action: ${action.verificationStep}`);
+    for (const followUp of candidate.candidate.followUpActions ?? []) {
+        if (followUp.command)
+            console.log(`Later separately approved command: ${followUp.command.display}`);
+        if (followUp.instruction)
+            console.log(`Follow-up instruction: ${followUp.instruction}`);
+    }
 }
 function printRepairApplyResult(result) {
     if (result.applied) {
@@ -190,6 +467,41 @@ function printRepairApplyResult(result) {
     bad(`${BOLD}REPAIR NOT APPLIED${RESET}`);
     console.log(result.explanation);
 }
+function printDiffResult(result) {
+    console.log(`${BOLD}Static infrastructure diff${RESET}`);
+    console.log(`Base: ${result.base}`);
+    console.log(`Head: ${result.head}`);
+    console.log(`Risk: ${result.riskLevel}`);
+    console.log(`Fresh boot proof required: ${result.proofRequired ? "yes" : "no detected infrastructure drift"}`);
+    const sections = [
+        ["Changed files", result.changedFiles],
+        ["Added services", result.addedServices],
+        ["Removed services", result.removedServices],
+        ["Added ports", result.addedPorts],
+        ["Removed ports", result.removedPorts],
+        ["Added env vars", result.addedEnvVars],
+        ["Removed env vars", result.removedEnvVars],
+        [
+            "Changed commands",
+            result.changedCommands.map(change => `${change.source}: ${change.before ?? "(absent)"} -> ${change.after ?? "(absent)"}`),
+        ],
+        [
+            "Changed package managers",
+            result.changedPackageManagers.map(change => `${change.source}: ${change.before ?? "(absent)"} -> ${change.after ?? "(absent)"}`),
+        ],
+    ];
+    for (const [label, values] of sections) {
+        if (!values.length)
+            continue;
+        console.log(`${label}:`);
+        for (const value of values)
+            console.log(`  - ${value}`);
+    }
+    console.log("Review notes:");
+    for (const note of result.suggestedReviewNotes)
+        console.log(`  - ${note}`);
+    console.log("Static analysis only. No repository code was executed and no data was uploaded.");
+}
 function rebaseRemoteRepairPaths(result, repo) {
     const rebase = (value) => value
         ? portableRelative(process.cwd(), path.join(repo, value))
@@ -216,11 +528,123 @@ async function main() {
     const { flags, positional } = parseFlags(rest);
     if (flags.ci || flags.json)
         disableColor();
+    const unsupportedFlag = Object.keys(flags).find(flag => !SUPPORTED_FLAGS[cmd]?.has(flag));
+    if (unsupportedFlag) {
+        const explanation = `unsupported flag for ${cmd}: --${unsupportedFlag}`;
+        if (cmd === "up" && flags.json)
+            console.log(JSON.stringify(machineFailure(explanation)));
+        else
+            bad(explanation);
+        process.exitCode = 1;
+        return;
+    }
     const targetInput = String(positional[0] ?? ".");
+    if (cmd === "diff") {
+        const optionError = positional.length
+            ? "diff does not accept a path; run it from the Git repository to compare"
+            : flags.base !== undefined && typeof flags.base !== "string"
+                ? "--base requires a Git ref"
+                : flags.head !== undefined && typeof flags.head !== "string"
+                    ? "--head requires a Git ref"
+                    : null;
+        if (optionError) {
+            bad(optionError);
+            process.exitCode = 1;
+            return;
+        }
+        const result = diffRefs(process.cwd(), {
+            base: flags.base,
+            head: flags.head,
+        });
+        if (flags.json)
+            console.log(JSON.stringify(result));
+        else
+            printDiffResult(result);
+        return;
+    }
+    if (cmd === "explain-run") {
+        if (!positional[0] || positional.length > 1) {
+            bad("explain-run requires exactly one run id");
+            process.exitCode = 1;
+            return;
+        }
+        const run = readAgentRun(process.cwd(), positional[0]);
+        for (const line of explainAgentRun(process.cwd(), positional[0]))
+            console.log(line);
+        process.exitCode = run.chainValid ? 0 : 1;
+        return;
+    }
+    if (cmd === "verify-url") {
+        if (!positional[0] || positional.length > 1) {
+            const explanation = "verify-url requires exactly one HTTP or HTTPS URL";
+            if (flags.json)
+                console.log(JSON.stringify(machineFailure(explanation)));
+            else
+                bad(explanation);
+            process.exitCode = 1;
+            return;
+        }
+        const timeoutMs = Number(flags.timeout ?? 5000);
+        if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) {
+            const explanation = `invalid --timeout value: ${String(flags.timeout)} (expected a positive number)`;
+            if (flags.json)
+                console.log(JSON.stringify(machineFailure(explanation)));
+            else
+                bad(explanation);
+            process.exitCode = 1;
+            return;
+        }
+        const attestation = await buildExternalHealthAttestation(process.cwd(), targetInput, timeoutMs);
+        if (flags.json)
+            console.log(JSON.stringify(attestation));
+        else
+            printExternalHealthResult(attestation, null);
+        process.exitCode = attestation.result.healthVerified ? 0 : 1;
+        return;
+    }
+    if (cmd === "up" && flags["external-health"] !== undefined) {
+        const externalHealthUrl = flags["external-health"];
+        const incompatibleFlag = ["provider", "unsafe-local", "install", "workspace", "port", "dry-run", "command"]
+            .find(flag => flags[flag] !== undefined);
+        const timeoutMs = Number(flags.timeout ?? 5000);
+        const optionError = typeof externalHealthUrl !== "string" || externalHealthUrl.trim().length === 0
+            ? "--external-health requires an HTTP or HTTPS URL"
+            : incompatibleFlag
+                ? `--external-health cannot be combined with --${incompatibleFlag}`
+                : !Number.isFinite(timeoutMs) || timeoutMs <= 0
+                    ? `invalid --timeout value: ${String(flags.timeout)} (expected a positive number)`
+                    : isRemoteTarget(targetInput)
+                        ? "--external-health requires a local evidence directory, not a remote repository URL"
+                        : null;
+        if (optionError) {
+            if (flags.json)
+                console.log(JSON.stringify(machineFailure(optionError)));
+            else
+                bad(optionError);
+            process.exitCode = 1;
+            return;
+        }
+        const target = path.resolve(targetInput);
+        const evidencePath = ".bootproof/attestation.json";
+        const attestation = await buildExternalHealthAttestation(target, externalHealthUrl, timeoutMs);
+        writeAttestation(target, attestation);
+        const runId = latestAgentRunId(target);
+        if (runId)
+            appendAgentVerification(target, runId, attestation);
+        if (flags.json)
+            console.log(JSON.stringify(externalMachineResult(attestation, evidencePath)));
+        else {
+            printExternalHealthResult(attestation, evidencePath);
+            if (runId)
+                console.log(`Agent run verification: ${runId}`);
+        }
+        process.exitCode = attestation.result.healthVerified ? 0 : 1;
+        return;
+    }
     let target = path.resolve(targetInput);
     let remote = null;
     let remoteSource = null;
-    if (["analyze", "plan", "up", "fix"].includes(cmd) && isRemoteTarget(targetInput)) {
+    if (["analyze", "plan", "plan-agent", "up", "fix"].includes(cmd) && isRemoteTarget(targetInput)) {
         if (flags["dry-run"]) {
             const explanation = "Remote dry runs are refused because cloning would write files, while BootProof dry runs promise to write nothing.";
             if (flags.json)
@@ -249,7 +673,7 @@ async function main() {
             return;
         }
     }
-    if (!remote && ["analyze", "plan", "up", "fix"].includes(cmd)) {
+    if (!remote && ["analyze", "plan", "plan-agent", "up", "fix"].includes(cmd)) {
         remoteSource = managedRemoteSource(target);
         if (remoteSource && !flags.json) {
             console.log(`${DIM}Managed remote source: ${remoteSource}${RESET}`);
@@ -279,6 +703,20 @@ async function main() {
             console.log(`${DIM}--- .env.bootproof.example (preview) ---\n${envExampleFor(inf)}${RESET}`);
         return;
     }
+    if (cmd === "plan-agent") {
+        const plan = buildAgentPlan(target);
+        const output = writeAgentPlan(target, plan);
+        const summary = createAgentRun(target, plan);
+        const displayedOutput = remote
+            ? portableRelative(process.cwd(), output)
+            : portableRelative(process.cwd(), agentPlanPath(target));
+        const displayedRun = portableRelative(process.cwd(), agentRunDirectory(target, summary.runId));
+        if (flags.json)
+            console.log(JSON.stringify(plan));
+        else
+            printAgentPlan(plan, displayedOutput, summary.runId, displayedRun);
+        return;
+    }
     if (cmd === "apply-repair") {
         if (isRemoteTarget(targetInput)) {
             const result = {
@@ -368,12 +806,80 @@ async function main() {
             process.exitCode = 1;
             return;
         }
+        const latestCandidate = latestDeterministicRepairCandidate(target, provider);
+        const latestFailure = latestFailedAttestation(target, provider);
+        const hasRegisteredDeterministicRepair = Boolean(latestFailure?.result.failureClass &&
+            registeredRemediationsFor(latestFailure.result.failureClass).length);
+        if (!latestCandidate && !hasRegisteredDeterministicRepair && flags.ai) {
+            resolveAiProvider();
+            const before = latestFailure;
+            if (!before) {
+                throw new Error("AI-assisted repair requires a signature-valid failed attestation. Run bootproof up first.");
+            }
+            if (flags.json || flags.ci) {
+                throw new Error("AI-assisted repair requires interactive consent and approval; --json and --ci never prompt or approve actions.");
+            }
+            const prompt = readline.createInterface({ input: process.stdin, output: process.stdout });
+            try {
+                const requestApproved = await prompt.question("No verified deterministic remediation is known. Request an AI suggestion using your BYOK provider? Type Y to approve: ") === "Y";
+                if (!requestApproved) {
+                    const result = {
+                        schema: "bootproof/repair-result/v1",
+                        repaired: false,
+                        failureClass: before.result.failureClass,
+                        repairId: null,
+                        receiptPath: null,
+                        patchPath: null,
+                        afterAttestationPath: null,
+                        explanation: "AI suggestion request was declined. No AI provider request, command, or patch occurred.",
+                    };
+                    printRepairResult(result);
+                    process.exitCode = 1;
+                    return;
+                }
+                const requested = await requestAiRepairSuggestion(before, { timeoutMs });
+                printAiRepairCandidate(requested);
+                const actionApproved = await aiRepairApproval(requested.action, prompt);
+                const repairResult = await executeAiSuggestedRepair(target, before, requested.action, {
+                    provider: provider,
+                    unsafeLocal: Boolean(flags["unsafe-local"]),
+                    timeoutMs,
+                    port,
+                    remoteSource: remoteSource ?? undefined,
+                    actionApproved,
+                    aiRepair: requested,
+                });
+                const result = remote ? rebaseRemoteRepairPaths(repairResult, target) : repairResult;
+                printRepairResult(result);
+                process.exitCode = result.repaired ? 0 : 1;
+                return;
+            }
+            finally {
+                prompt.close();
+            }
+        }
+        let actionApproved = false;
+        if (latestCandidate && !flags.json) {
+            printRepairCandidate(latestCandidate);
+        }
+        if (latestCandidate &&
+            latestCandidate.candidate.action.actionType !== "instruction" &&
+            !flags.json &&
+            !flags.ci) {
+            const effectiveProvider = provider ?? latestCandidate.attestation.plan.provider;
+            if (effectiveProvider !== "local" || flags["unsafe-local"]) {
+                actionApproved = latestCandidate.candidate.action.actionType === "command"
+                    ? await commandRepairApproval(latestCandidate.candidate.action)
+                    : await patchRepairApproval(latestCandidate.candidate.action);
+            }
+        }
         const repairResult = await repairRepo(target, {
             provider: provider,
             unsafeLocal: Boolean(flags["unsafe-local"]),
             timeoutMs,
             port,
             remoteSource: remoteSource ?? undefined,
+            actionApproved,
         });
         const result = remote ? rebaseRemoteRepairPaths(repairResult, target) : repairResult;
         if (flags.json)
@@ -387,13 +893,19 @@ async function main() {
         const provider = flags.provider ?? "docker";
         const timeoutMs = Number(flags.timeout ?? 60_000);
         const port = flags.port === undefined ? undefined : Number(flags.port);
+        const command = flags.command;
+        const healthPath = typeof flags["health-path"] === "string" ? flags["health-path"] : undefined;
         const optionError = provider !== "docker" && provider !== "local"
             ? `invalid --provider value: ${String(provider)} (expected docker or local)`
             : !Number.isFinite(timeoutMs) || timeoutMs <= 0
                 ? `invalid --timeout value: ${String(flags.timeout)} (expected a positive number)`
                 : port !== undefined && (!Number.isInteger(port) || port < 1 || port > 65_535)
                     ? `invalid --port value: ${String(flags.port)} (expected an integer from 1 to 65535)`
-                    : null;
+                    : command !== undefined && (typeof command !== "string" || command.trim().length === 0)
+                        ? "--command requires a non-empty command string"
+                        : healthPath !== undefined && (typeof healthPath !== "string" || !healthPath.startsWith("/"))
+                            ? "--health-path requires a path starting with / (e.g. /health)"
+                            : null;
         if (optionError) {
             if (flags.json)
                 console.log(JSON.stringify(machineFailure(optionError)));
@@ -411,9 +923,18 @@ async function main() {
             timeoutMs,
             install: Boolean(flags.install),
             port,
+            command: typeof command === "string" ? command : undefined,
+            healthPath,
+            ciOidc: Boolean(flags["ci-oidc"]),
         };
         const outcome = await up(target, opts);
         const verified = outcome.attestation?.result.booted === true && outcome.attestation.result.healthVerified === true;
+        if (flags.receipt && outcome.attestation) {
+            const receiptPath = path.join(target, ".bootproof", "living-receipt.html");
+            emitLivingReceipt(outcome.attestation, receiptPath);
+            if (!flags.json)
+                console.log(`${GREEN}\u2713${RESET} Living Receipt: ${portableRelative(process.cwd(), receiptPath)}`);
+        }
         if (flags.json) {
             console.log(JSON.stringify(machineResult(outcome, evidencePath)));
             if (flags.ci || !opts.dryRun)
@@ -456,25 +977,43 @@ async function main() {
         return;
     }
     if (cmd === "verify") {
-        const p = path.extname(target) === ".json" ? target : attestationPath(target);
+        const directoryTarget = fs.existsSync(target) && fs.statSync(target).isDirectory();
+        const p = directoryTarget ? attestationPath(target) : target;
         if (!fs.existsSync(p)) {
             bad(`no proof at ${p} — run bootproof up or bootproof fix first`);
             process.exitCode = 1;
             return;
         }
         const proof = JSON.parse(fs.readFileSync(p, "utf8"));
+        const requireKnownSigner = Boolean(flags["require-known-signer"] || flags.strict);
+        const trustRequested = Boolean(flags["trust-signer"]);
         if (isRepairReceipt(proof)) {
-            const valid = verifyRepairReceipt(proof);
-            (valid ? ok : bad)(`repair receipt signature ${valid ? "valid" : "INVALID"} (ed25519, trust-on-first-use)`);
-            console.log(`${DIM}failure=${proof.verification.before.failureClass} repair=${proof.repair.id} after=${proof.verification.after.healthObservation}${RESET}`);
-            if (!valid)
+            let trust = evaluateRepairReceiptSignature(proof);
+            trust = maybeTrustSigner(trust, proof.signer?.publicKey, trustRequested, () => evaluateRepairReceiptSignature(proof));
+            printSignatureTrust(trust);
+            const summary = proof.verification && proof.repair
+                ? `failure=${proof.verification.before.failureClass} repair=${proof.repair.id} after=${proof.verification.after.healthObservation}`
+                : `failure=${proof.beforeFailureClass} repair=${proof.repairId} applied=${proof.applyResult.status} progressed=${proof.progressed} verified=${proof.verified}`;
+            console.log(`${DIM}${summary}${RESET}`);
+            if (signerTrustFails(trust, requireKnownSigner))
                 process.exitCode = 1;
             return;
         }
         const att = proof;
-        const sig = verifySignature(att);
-        (sig ? ok : bad)(`signature ${sig ? "valid" : "INVALID"} (ed25519, trust-on-first-use)`);
-        console.log(`Trust level: ${att.trust?.level ?? "legacy_unspecified"}`);
+        let trust = evaluateAttestationSignature(att);
+        trust = maybeTrustSigner(trust, att.signer?.publicKey, trustRequested, () => evaluateAttestationSignature(att));
+        printSignatureTrust(trust);
+        console.log(`Attested trust claim: ${att.trust?.level ?? "legacy_unspecified"} (signed content; signer tier shown above)`);
+        const commitMismatch = directoryTarget ? commitMismatchMessage(att, target) : null;
+        if (commitMismatch)
+            warn(commitMismatch);
+        if (att.verificationMode === "external-health") {
+            console.log(`${DIM}attested: classification=${att.classification} bootproofOrchestrated=false at ${att.observedAt ?? att.finishedAt}${RESET}`);
+            console.log("This attestation observes an externally managed service; it does not claim BootProof started the application.");
+            if (signerTrustFails(trust, requireKnownSigner) || (commitMismatch && requireKnownSigner))
+                process.exitCode = 1;
+            return;
+        }
         console.log(`${DIM}attested: booted=${att.result.booted} at commit ${att.repo.commit ?? "unknown"} on ${att.environment.os} node ${att.environment.node}${RESET}`);
         const retainedRemote = managedRemoteSource(att.repo.path);
         if (retainedRemote) {
@@ -484,29 +1023,85 @@ async function main() {
         else {
             console.log(`Replaying attested plan with bootproof up --provider ${att.plan.provider} would re-verify it on this machine.`);
         }
-        if (att.result.booted) {
+        if (att.result.booted && !commitMismatch && (trust.tier === "self" || trust.tier === "known")) {
             const live = await pollHealth(att.plan.healthUrl, 3000);
             if (live.responded)
                 ok(`bonus observation: ${att.plan.healthUrl} is responding right now (HTTP ${live.status})`);
             else
                 console.log(`${DIM}(app not currently running — attestation describes a past verified run)${RESET}`);
         }
-        if (!sig)
+        else if (att.result.booted && commitMismatch) {
+            console.log(`${DIM}(live health bonus skipped because the attestation does not match the current commit)${RESET}`);
+        }
+        else if (att.result.booted && trust.tier === "unknown-foreign") {
+            console.log(`${DIM}(live health bonus skipped because the signer is unknown)${RESET}`);
+        }
+        if (signerTrustFails(trust, requireKnownSigner) || (commitMismatch && requireKnownSigner))
             process.exitCode = 1;
         return;
     }
+    if (cmd === "registry") {
+        const sub = positional[0];
+        const repo = path.resolve(String(positional[1] ?? "."));
+        if (sub !== "export") {
+            bad(`unknown registry subcommand: ${sub ?? "(none)"} — use export`);
+            process.exitCode = 1;
+            return;
+        }
+        const requestedMode = String(flags.mode ?? (flags.federated ? "federated_public_candidate" : "local_export"));
+        const registryModes = ["local_export", "federated_public_candidate", "cloud_upload_candidate"];
+        if (!registryModes.includes(requestedMode)) {
+            bad(`invalid --mode value: ${requestedMode}`);
+            process.exitCode = 1;
+            return;
+        }
+        if (flags.federated && requestedMode !== "federated_public_candidate") {
+            bad("--federated requires --mode federated_public_candidate when --mode is provided");
+            process.exitCode = 1;
+            return;
+        }
+        const entry = registryEntryFor(repo, requestedMode);
+        if (!entry) {
+            bad(`no attestation at ${attestationPath(repo)} — run bootproof up first`);
+            process.exitCode = 1;
+            return;
+        }
+        if (flags.federated) {
+            const receipt = buildFederatedReceipt(entry, { sign: true });
+            const output = writeFederatedReceipt(repo, receipt);
+            ok(`wrote redacted federated public candidate: ${output}`);
+        }
+        else {
+            const output = writeRegistryEntry(repo, entry);
+            ok(`wrote redacted registry entry: ${output}`);
+        }
+        console.log(`${DIM}redactions applied: ${entry.redactionsApplied.join(", ")}${RESET}`);
+        console.log("Nothing has been uploaded. This export is local and opt-in.");
+        if (flags.federated) {
+            console.log("Review the receipt before deliberately committing it to the public repository.");
+        }
+        else if (requestedMode === "cloud_upload_candidate") {
+            console.log("This is only a Cloud upload candidate. BootProof Cloud upload is not implemented here.");
+        }
+        return;
+    }
     if (cmd === "attest") {
         const sub = positional[0];
         const repo = path.resolve(String(positional[1] ?? "."));
         if (sub === "export") {
-            const ap = attestationPath(repo);
-            if (!fs.existsSync(ap)) {
-                bad(`no attestation at ${ap} — run bootproof up first`);
+            const verificationFlag = ["trust-signer", "require-known-signer", "strict"]
+                .find(flag => flags[flag] !== undefined);
+            if (verificationFlag) {
+                bad(`--${verificationFlag} is supported only by attest check`);
+                process.exitCode = 1;
+                return;
+            }
+            const entry = registryEntryFor(repo, "local_export");
+            if (!entry) {
+                bad(`no attestation at ${attestationPath(repo)} — run bootproof up first`);
                 process.exitCode = 1;
                 return;
             }
-            const att = JSON.parse(fs.readFileSync(ap, "utf8"));
-            const entry = buildRegistryEntry(att);
             const out = writeRegistryEntry(repo, entry);
             ok(`wrote redacted registry entry: ${out}`);
             console.log(`${DIM}redactions applied: ${entry.redactionsApplied.length ? entry.redactionsApplied.join(", ") : "none needed"}${RESET}`);
@@ -523,10 +1118,12 @@ async function main() {
                 return;
             }
             const entry = JSON.parse(fs.readFileSync(ep, "utf8"));
-            const valid = verifyRegistryEntry(entry);
-            (valid ? ok : bad)(`registry entry signature ${valid ? "valid" : "INVALID"}`);
-            console.log(`${DIM}booted=${entry.result.booted} class=${entry.result.failureClass ?? "none"} commit=${entry.repo.commit?.slice(0, 8) ?? "?"}${RESET}`);
-            if (!valid)
+            const requireKnownSigner = Boolean(flags["require-known-signer"] || flags.strict);
+            let trust = evaluateRegistryEntrySignature(entry);
+            trust = maybeTrustSigner(trust, entry.signature?.publicKey, Boolean(flags["trust-signer"]), () => evaluateRegistryEntrySignature(entry));
+            printSignatureTrust(trust);
+            console.log(`${DIM}verified=${entry.verified} class=${entry.failureClass ?? "none"} commit=${entry.commitHash?.slice(0, 8) ?? "?"}${RESET}`);
+            if (signerTrustFails(trust, requireKnownSigner))
                 process.exitCode = 1;
             return;
         }
@@ -534,34 +1131,121 @@ async function main() {
         process.exitCode = 1;
         return;
     }
+    if (cmd === "export-sbom") {
+        const format = flags.format ?? "cyclonedx-json";
+        if (format !== "cyclonedx-json") {
+            if (flags.json)
+                console.log(JSON.stringify(machineFailure(`Unsupported SBOM format: ${format}. Currently supported: cyclonedx-json.`)));
+            else
+                bad(`Unsupported SBOM format: ${format}. Currently supported: cyclonedx-json.`);
+            process.exitCode = 1;
+            return;
+        }
+        try {
+            const result = exportSbom(target, format);
+            if (flags.json) {
+                console.log(JSON.stringify(result));
+                return;
+            }
+            ok(`SBOM exported: ${portableRelative(process.cwd(), result.path)}`);
+            console.log(`  format: ${result.format}`);
+            console.log(`  components: ${result.componentCount}`);
+            console.log(`${DIM}CycloneDX 1.5 JSON. Read from package-lock.json. No transitive resolution beyond the lockfile.${RESET}`);
+        }
+        catch (e) {
+            const msg = e instanceof Error ? e.message : String(e);
+            if (flags.json)
+                console.log(JSON.stringify(machineFailure(msg)));
+            else
+                bad(msg);
+            process.exitCode = 1;
+        }
+        return;
+    }
+    if (cmd === "rotate-keys") {
+        const repo = flags.repo ? path.resolve(String(flags.repo)) : undefined;
+        const resign = Boolean(flags.resign);
+        const backup = !flags["no-backup"];
+        try {
+            const result = rotateSigner({ repo, resignAttestation: resign, backup });
+            if (flags.json) {
+                console.log(JSON.stringify(result));
+                return;
+            }
+            ok("Signing key rotated.");
+            console.log(`  old public key: ${result.oldPublicKey.split("\n")[0]}...`);
+            console.log(`  new public key: ${result.newPublicKey.split("\n")[0]}...`);
+            if (result.backedUpTo)
+                console.log(`  old key backed up to: ${result.backedUpTo}`);
+            if (result.reSignedAttestation)
+                console.log(`  re-signed latest attestation at ${repo}`);
+            console.log(`${DIM}Existing attestations still verify with their embedded public key. Rotation only affects future signatures.${RESET}`);
+        }
+        catch (e) {
+            const msg = e instanceof Error ? e.message : String(e);
+            if (flags.json)
+                console.log(JSON.stringify(machineFailure(msg)));
+            else
+                bad(msg);
+            process.exitCode = 1;
+        }
+        return;
+    }
     if (cmd === "explain") {
         const p = positional[0] ? path.resolve(positional[0]) : attestationPath(target);
         const proof = JSON.parse(fs.readFileSync(p, "utf8"));
         if (isRepairReceipt(proof)) {
-            const valid = verifyRepairReceipt(proof);
+            const trust = evaluateRepairReceiptSignature(proof);
             console.log(`${BOLD}Repair receipt explained${RESET}`);
-            console.log(`Signature: ${valid ? "valid" : "INVALID"}`);
-            if (!valid) {
+            console.log(`Signature: ${signatureTrustText(trust).replace(/^signature /, "")}`);
+            if (!trust.integrityValid) {
                 console.log("The receipt has been tampered with or is malformed. Its repair claims are not trusted.");
                 process.exitCode = 1;
                 return;
             }
-            console.log(`Before: NOT VERIFIED — ${proof.verification.before.failureClass}.`);
-            console.log(`Repair: ${proof.repair.id} (${proof.repair.kind}).`);
-            console.log(`After: BOOTED — ${proof.verification.after.healthObservation}.`);
-            console.log(`Description: ${proof.repair.description}`);
-            if (proof.repair.filesChanged.length)
-                console.log(`Files changed in sandbox: ${proof.repair.filesChanged.join(", ")}`);
-            if (proof.repair.planDelta)
-                console.log(`Plan delta: ${proof.repair.planDelta}`);
-            if (proof.repair.envDelta)
-                console.log(`Environment delta: ${proof.repair.envDelta}`);
+            console.log(`Before: NOT VERIFIED — ${proof.beforeFailureClass}.`);
+            console.log(`Repair: ${proof.repairId} (${proof.actionType}; scope=${proof.mutationScope}; risk=${proof.riskLevel}).`);
+            if (proof.proposedAction.command)
+                console.log(`Command: ${proof.proposedAction.command.display}`);
+            if (proof.proposedAction.instruction)
+                console.log(`Instruction: ${proof.proposedAction.instruction}`);
+            console.log(`Applied: ${proof.applyResult.status}. Progressed: ${proof.progressed}. Verified: ${proof.verified}.`);
+            if (proof.afterFailureClass)
+                console.log(`After failure: ${proof.afterFailureClass}.`);
+            console.log(`Description: ${proof.explanation}`);
+            if (proof.repair) {
+                if (proof.repair.filesChanged.length)
+                    console.log(`Files changed in sandbox: ${proof.repair.filesChanged.join(", ")}`);
+                if (proof.repair.planDelta)
+                    console.log(`Plan delta: ${proof.repair.planDelta}`);
+                if (proof.repair.envDelta)
+                    console.log(`Environment delta: ${proof.repair.envDelta}`);
+            }
             return;
         }
         const att = proof;
+        const trust = evaluateAttestationSignature(att);
         console.log(`${BOLD}Attestation explained${RESET}`);
+        console.log(`Signature: ${signatureTrustText(trust).replace(/^signature /, "")}`);
+        if (!trust.integrityValid) {
+            console.log("The attestation has been tampered with or is malformed. Its boot claims are not trusted.");
+            process.exitCode = 1;
+            return;
+        }
+        if (att.verificationMode === "external-health") {
+            console.log(att.result.healthVerified
+                ? `This externally managed service was VERIFIED: ${att.result.healthObservation}.`
+                : `This external health check did NOT verify. Classification: ${att.classification}.`);
+            console.log("BootProof did not start or orchestrate this service.");
+            console.log(att.result.explanation);
+            if (att.plan.healthCandidates?.length)
+                console.log(`Health candidates: ${att.plan.healthCandidates.join(", ")}`);
+            for (const o of att.observed)
+                console.log(`  ${o.ok ? "\u2713" : "\u2717"} ${o.id}: ${o.observation}`);
+            return;
+        }
         console.log(att.result.booted ? `This run BOOTED: ${att.result.healthObservation}.` : `This run did NOT verify. Failure class: ${att.result.failureClass}.`);
-        console.log(`Trust level: ${att.trust?.level ?? "legacy_unspecified"}`);
+        console.log(`Attested trust claim: ${att.trust?.level ?? "legacy_unspecified"} (signed content; signer tier shown above)`);
         if (!att.result.booted && att.result.failureClass) {
             const diagnosis = diagnoseFailure(att.result.failureClass, att.result.failureEvidence, att.result.explanation);
             console.log(`What happened: ${diagnosis.whatHappened}`);
@@ -583,7 +1267,7 @@ async function main() {
 }
 main().catch(err => {
     const argv = process.argv.slice(2);
-    if (argv.includes("--json") && argv[0] === "up") {
+    if (argv.includes("--json") && (argv[0] === "up" || argv[0] === "verify-url")) {
         console.log(JSON.stringify(machineFailure(String(err?.message ?? err))));
     }
     else if (argv.includes("--json") && argv[0] === "fix") {