autonomy lock generate

Emit canonical JSON from a lock file (JSON primary; TOML legacy)

Synopsis

Reads a lock file from --src and writes canonical JSON to --out (default: stdout).
Also prints the fingerprint to stderr.

JSON input (.json) — canonical MVP path:
  Parses the JSON schema, normalizes, computes the BLAKE3 behavioral fingerprint,
  and writes canonical JSON.  Prefer this over TOML input.

TOML input (.toml) — legacy / dev-only path:
  Prints a deprecation warning.  Converts TOML to canonical JSON and computes the
  legacy SHA-256 fingerprint.  Not MVP-gating.

When --src is a directory, autonomy.lock.json is preferred over autonomy.lock.toml.

Usage

autonomy lock generate [flags]

Options

      --out string   output path (- for stdout) (default "-")
      --src string   path to autonomy.lock.json (preferred) or legacy .toml, or directory containing one (default ".")

Options inherited from parent commands

      --require-signed-manifest   Refuse to start if the SHA256SUMS release manifest or its cosign signature is missing/invalid (Tier 2 binary-integrity check; default: build-time compile-in via -ldflags -X, build-hardened artifacts=true, all others=false)

See also