08 , CLI reference
Every Faramesh command, grouped by plane. Run faramesh <command> --help for detailed flag documentation on any command.
demoRun built-in demo traffic against the daemoninitScaffold a new Faramesh project with default policydetectDetect agent framework, runtime, and OS capabilitiesstatusShow daemon status and loaded policy summarystopGracefully stop the running daemonserveStart the governance daemon (flags: --policy, --data-dir, --socket, --metrics-port, --proxy-port, --grpc-port, --mcp-proxy-port, --mcp-target)runWrap and govern an agent process (auto-detect, patch, sandbox)policy validate <policy.fpl|policy.yaml>Check a policy file for syntax / semantic errorspolicy inspect <policy.yaml>Print a summary of all rules in the filepolicy diff <old.yaml> <new.yaml>Show differences between two policy versionspolicy backtestReplay deterministic fixtures (optional: --policy, --fixtures)policy compileNLP → FPL compilation from natural languagepolicy fplFPL sub-commands (decompile, format)policy test <policy.yaml>Run policy against a single tool call (--tool required)policy debug <policy.yaml>Trace rule evaluation for a specific tool call (--tool required)policy analyzeAnalyze policy coverage and rule effectivenesspolicy cover <policy.yaml>Show coverage report for policy rulespolicy suite <policy.yaml> --fixtures <suite.yaml>Run a policy test suitepolicy reloadHot-reload policy without restarting daemonsession open <agent-id>Open a new session with optional budget and TTLsession close <agent-id>Close an active sessionsession listList all sessions (active and closed)session budget <agent-id>Show or set budget for a sessionsession reset <agent-id>Reset session counterssession inspect <agent-id>Detailed session state and historysession purpose declare <agent-id> <purpose>Declare purpose for a sessionagent approve <defer-token>Approve a deferred actionagent deny <defer-token>Deny a deferred actionagent kill <agent-id>Activate kill switch for an agentagent unkill <agent-id>Deactivate kill switchagent killedList agents with active kill switchesagent pendingList actions awaiting approvalagent listList all known agentsagent inspect <agent-id>Detailed agent state and statisticsagent history <agent-id>Decision history for a specific agentaudit tailStream live verdictsaudit verify <db-path>Verify DPR chain integrityaudit export <dpr.db>Export audit records (JSON, CSV, JSONL)audit stats <dpr.db>Aggregate statistics over the audit logcredential register <name>Register a credential with a backendcredential listList registered credentialscredential inspect <name>Show credential metadata and healthcredential rotate <name>Trigger credential rotationcredential healthCheck backend connectivitycredential revoke <name>Revoke a credential bindingcredential audit <name>Show credential access historydelegate grant <from-agent> <to-agent>Grant delegation to a principal with scope and ceilingdelegate list <agent-id>List active delegationsdelegate revoke <from-agent> <to-agent>Revoke a delegationdelegate inspect <delegation-token>Show delegation details and chaindelegate verify <delegation-token>Verify a delegation tokendelegate chain <agent-id>Show the full delegation chainidentity verifyVerify an identity attestationidentity trustSet trust level for an identityidentity whoamiShow current identityidentity attestCreate an identity attestationidentity federationShow federation membershipidentity trust-levelQuery trust level for a principalincident declareDeclare a new incidentincident listList all incidentsincident inspect <incident-id>Show incident details and timelineincident isolate <agent-id>Isolate an agent during an incidentincident evidence <incident-id>Retrieve evidence artifacts for an incidentincident resolve <incident-id>Mark an incident as resolvedincident playbook <incident-id>Show recommended incident response playbookschedule createCreate a scheduled executionschedule listList all scheduled executionsschedule inspect <schedule-id>Show schedule detailsschedule cancel <schedule-id>Cancel a scheduled executionschedule approve <schedule-id>Approve a pending scheduled executionschedule pendingList schedules awaiting approvalschedule historyShow schedule execution historyprovenance signSign a policy or artifactprovenance verify <agent-id>Verify provenance attestationprovenance inspect <agent-id>Show provenance metadataprovenance diff <agent-id>Diff current runtime vs signed provenanceprovenance listList signed artifactsmodel register <name>Register a model for integrity trackingmodel verifyVerify model integrity against registered hashmodel consistencyCheck model consistency across deploymentsmodel listList registered modelsmodel alert <agent-id>Show model integrity alerts for an agentUse the ops command group for operations workflows.
ops policy-change propose <policy.yaml>Propose a policy change (four-eyes workflow)ops policy-change listList pending policy change proposalsops policy-change approve <proposal-id>Approve a policy change proposalops policy-change reject <proposal-id>Reject a policy change proposalops auditOperator audit logops loginOperator loginops logoutOperator logoutops whoamiShow current operator identityfleet listList all agents across the fleetfleet push <instance-id>Publish a push control event for an instancefleet kill <instance-id>Publish a kill control event for an instancehub search <query>Search the policy hub for shared policieshub install <pack-ref>Install a policy from the hubhub publish <path>Publish a policy to the hubhub verify <pack-ref>Verify a hub policy signaturefederation trust addAdd a trusted external organisationfederation trust listList trusted organisationsfederation trust revokeRevoke trust from an organisationfederation receipt verify <receipt-token>Verify a cross-org governance receiptfederation receipt issueIssue a governance receiptchaos-test degradedToggle degraded mode on the daemonchaos-test faultToggle fault injection mode on the daemonchaos-test run --scenarioRun a named chaos scenariochaos-test list-scenariosList all available chaos scenarioscompensate buildBuild a compensation workflow from a DPR recordcompensate listList compensation workflowscompensate inspectShow compensation workflow detailscompensate applyApply a compensation workflowcompensate statusShow compensation statuscompensate retryRetry a failed compensation stepcompliance export --wal <dpr.wal>Export deterministic compliance evidence bundlesign file --private-key <key.pem> --file <path>Sign a build artifact or policy fileverify digest <file>Print SHA-256 digest for a fileverify manifest <manifest.json>Verify an artifact manifestverify buildinfo [expected.json]Emit or verify reproducible build infoverify signature --public-key <pub.pem> --file <path> --signature <sig>Verify an artifact signaturesbomGenerate software bill of materialsmcp wrap -- <command> [args...]Wrap an MCP server process and intercept tool calls at stdio levelauth loginAuthenticate with the Faramesh platformauth logoutClear stored credentialsauth statusShow current authentication statusexplainExplain why a specific decision was made--versionPrint Faramesh version and build infoNeed help? Use any of these support options.