Tooling

CLI Reference

The rtq CLI provides commands for inspecting capabilities, testing policies, verifying sandbox enforcement, and running diagnostics.

Commands

rtq capabilities

List all registered capabilities with their risk levels and schemas.

rtq capabilities
rtq capabilities --json

rtq policy check

Evaluate policy rules against a set of capabilities. Reports any gaps or conflicts.

rtq policy check --config ./policy.yaml

rtq sandbox test

Test sandbox enforcement on the current platform. Verifies filesystem, network, and process restrictions.

rtq sandbox test --verbose

rtq verify

Run all 12 security invariants. Reports pass/fail/skip for each.

rtq verify
rtq verify --invariant INV-01

rtq diagnostics

System diagnostics: platform, sandbox availability, key status, package versions.

rtq diagnostics

rtq ticket inspect

Inspect a ticket's contents (signature, expiry, operation, single-use status).

rtq ticket inspect <ticket-id>