One command does the work. Five keep it honest.

Commands

--home DIR before any command moves the whole state folder (store, transcripts, keys). -h prints help; --version the version.

suncly attest options (Proposed)

An attestation started from the CLI has trigger manual, also when CI calls the CLI.

Exit codes

Because every decision is flag in this version, no pipeline should gate a release on the exit code alone. Archive the report folder and route it to a reviewer.

Contract file (Proposed)

A hand-written or exported contract: one JSON document with the test cases of one contract for one card. Field names are the data model's. The file carries no approval fields: approval is recorded by --approve-as or the prompt.

{
  "suncly_contract_file": 1,
  "card_hash": "sha256:…",
  "agent_name": "Order Status Agent",
  "skills_without_test_case": [],
  "test_cases": [
    {
      "skill_id": "order-status",
      "kind": "skill",
      "input": {"text": "Where is order 1234?"},
      "criteria": {
        "final_state": "TASK_STATE_COMPLETED",
        "latency_limit_ms": 10000,
        "response_present": true,
        "output_modes": ["text/plain"],
        "required_fields": ["/artifacts/0/parts/0/text"],
        "response_schema": {"type": "object", "required": ["artifacts"]},
        "model_checks": [],
        "accept_direct_message": false
      }
    }
  ]
}

• card_hash must equal the hash of the fetched card, or the file is refused.
• Every declared skill needs a test case, or must be listed under skills_without_test_case to acknowledge that it stays untested.
• input is {"text": …} or {"parts": […]} with A2A Part objects.
• criteria keys: final_state (a terminal task state, default TASK_STATE_COMPLETED); latency_limit_ms (required); response_present; output_modes (media types every output part must use; null disables the check); required_fields (JSON pointers that must exist and be non-empty in the final response); response_schema (a JSON Schema the final response must satisfy); model_checks (criteria for Layer 2, which does not exist yet, so any entry makes the run inconclusive); accept_direct_message (a direct Message reply counts as a completed task). Unknown keys are refused, so a typo can never silently weaken a check.

Settings and environment

Resolved in this order: built-in defaults, then SUNCLY_HOME/config.toml, then environment variables. A blank value is the same as an unset one.

Machine-readable output

suncly attest … --json prints one JSON object with exit_code, exit_code_meaning (“0 means completed and signed, not approved”), kind (completed, failed, invalidated or draft_exported), attestation, decision, results, not_tested and report_dir. suncly verify … --json prints ok and the list of checks.