CLI

All Liskov commands are subcommands of proof liskov. Read-only commands never spend; only custody execution run-one --yes-spend moves money.

proof liskov
├── login                                  open a browser-confirmed CLI session
├── whoami                                 print the current session identity
├── logout                                 clear local session state
├── application
│   ├── list                               list your applications
│   ├── status <APP>                       show one application's state
│   ├── plans <APP>                        list policy versions and plan items
│   └── import --github <owner/repo> [--publish]
│                                          import from GitHub, optionally publish
└── custody
    ├── preflight <APP>                     validate budget/secrets/ingress → quote
    └── execution
        └── run-one <APP> [flags]           launch exactly one execution

Session

Command	Description
proof liskov login	Open a browser-confirmed session and save a local bearer token.
proof liskov whoami	Read the session file, call the control plane, print identity.
proof liskov logout	Remove local session state.

Applications

Command	Description
proof liskov application list	List applications for your session.
proof liskov application status <APP>	Show an application's current state.
proof liskov application plans <APP>	List published policy versions and derived plan items.
proof liskov application import --github <owner/repo>	Import/update the draft from a repo.
proof liskov application import --github <owner/repo> --publish	Also publish an immutable, signed policy version.

Custody

Command	Description
proof liskov custody preflight <APP>	Validate budget, secrets, and ingress; return a signed quote. No spend.
proof liskov custody execution run-one <APP>	Launch exactly one custody execution.

run-one flags

Flag	Description
--yes-spend	Required to actually fund and launch. Stricter than --yes.
--plan-item-id <id>	Target a specific plan item.
--idempotency-key <key>	Make a retried launch safe to repeat.
--override-replacement-hold --reason <text>	Clear a replacement hold deliberately, with a reason.

Global Flags

Flag / variable	Description
--json	Machine-readable output. Never prints token material.
--config <path>	Override the session file location.
PROOF_LISKOV_SESSION_FILE	Environment override for the session file (XDG-style, written 0600).