`autonomy lock`¶

Manage autonomy.lock files

Synopsis¶

Manage autonomy.lock.json files — the canonical MVP lock artifact.

Primary commands (JSON, MVP):
  canonicalize   Normalize a hand-edited autonomy.lock.json
  fingerprint    Compute or verify the BLAKE3 behavioral fingerprint
  diff           Compare two lock files

Legacy commands (TOML, dev-only):
  generate       Convert a TOML lock file to canonical JSON (prints TOML warning)
  verify         Verify a lock file fingerprint (JSON: BLAKE3; TOML: SHA-256 legacy)

Options inherited from parent commands¶

      --require-signed-manifest   Refuse to start if the SHA256SUMS release manifest or its cosign signature is missing/invalid (Tier 2 binary-integrity check; default: build-time compile-in via -ldflags -X, build-hardened artifacts=true, all others=false)

Subcommands¶

autonomy lock canonicalize — Parse and re-emit autonomy.lock.json in canonical form
autonomy lock diff — Show semantic diff between two lock files
autonomy lock fingerprint — Compute or verify the BLAKE3 behavioral fingerprint of a lock file
autonomy lock generate — Emit canonical JSON from a lock file (JSON primary; TOML legacy)
autonomy lock verify — Verify a lock file fingerprint (JSON: BLAKE3; TOML legacy: SHA-256)