autonomy lock canonicalize¶
Parse and re-emit autonomy.lock.json in canonical form
Synopsis¶
Reads an autonomy.lock.json from --in, validates the schema, and writes
the canonical JSON (key-sorted, behavioral_fingerprint excluded) to --out.
This is the primary normalization step before computing the BLAKE3 fingerprint.
Use "autonomy lock fingerprint" after this to compute or verify the fingerprint.
Usage¶
autonomy lock canonicalize [flags]
Options¶
--in string input lock file path (.json) (default "autonomy.lock.json")
--out string output path (- for stdout) (default "-")
Options inherited from parent commands¶
--require-signed-manifest Refuse to start if the SHA256SUMS release manifest or its cosign signature is missing/invalid (Tier 2 binary-integrity check; default: build-time compile-in via -ldflags -X, build-hardened artifacts=true, all others=false)
See also¶
autonomy lock— Manage autonomy.lock files