Plan and apply in one call, then optionally verify and ship. Stops at the first stage that exits non-zero; the artifacts of every stage that did run are still returned under that stage's own key.
fluxsim run [options] <bundle>
fluxsim run ./bundle --verify --ship -o ./out
fluxsim run ./bundle
| Argument | Description |
|---|
bundle | path to the FLUX bundle directory |
| Option | Value | Description |
|---|
--simulation-id | SIMULATION_ID | which Simulation document to resolve (default: the bundle's only one) |
--zone | ZONE | declared run zone, for sovereignty checks |
--verify | | run fluxsim verify on the applied run |
--ship | | run fluxsim ship on the applied run; requires -o |
-o, --out-dir | OUT_DIR | directory the evidence archive and its statements are written to (required with --ship) |
--committed-slice | EXPOSE_ID=file://PATH | the committed real-data slice one expose's fidelity check is measured against, as EXPOSE_ID=file://PATH; repeatable, once per expose; the file holds one JSON object per line, keyed by the expose's contract column names (e.g. {"subscriber_id": "s-1", "amount": "12.50"}) |
--update-golden | | record this run as the golden baseline (requires --reason) |
--reason | REASON | why the golden baseline is being updated |
--allow-declared-baseline-drift | | exit 0 even when the bundle's declared golden.baselineDigest does not match this run's runDigest |
--signing-key | SIGNING_KEY | file holding a 32-byte ed25519 seed (raw or hex) to sign fidelity records with; without it ship signs with a per-invocation key attributable to nobody |
--trust-key | PATH | file holding the 32-byte raw ed25519 PUBLIC key (raw or hex -- the publicKey a fidelity record prints) the gate checks the record's signature against; without it the record is checked against the public half of the key that signed it and says it is self-attested |
--state-dir | STATE_DIR | run-state directory (default: ./.flux) |
-j, --json | | emit machine-readable JSON |
All commands
