Commands

Command reference for atl-cli.

Global flags

Available for all commands:

• --quiet, -q — Suppress all output (use exit codes only)
• --json — Output as JSON instead of human-readable text
• --no-color — Disable colored output

Exit codes

• 0 — VALID (verification succeeded)
• 1 — INVALID (verification failed)
• 2 — ERROR (runtime error, invalid arguments, etc.)

verify

Verify file(s) against receipt(s).

Single file mode

atl-cli verify <source_file> <receipt_file>

Verifies one source file against its receipt.

Example:

atl-cli verify document.pdf document.pdf.atl

Batch mode

atl-cli verify <source_directory> <receipt_directory>

Verifies all files in source directory against matching receipts in receipt directory.

Example:

atl-cli verify ./files/ ./receipts/

Batch mode also performs log consistency verification across all receipts.

Flags

• --offline — Force offline mode (skip anchor verification even if internet available)
• --online — Force online mode (fail if no internet connection)
• --verbose, -v — Show detailed verification steps

Verification steps

Offline mode:

1. Hash source file (SHA-256)
2. Compare hash with payload_hash in receipt
3. Verify metadata_hash (if present)
4. Verify Merkle inclusion proof
5. Verify checkpoint signature (if key available)
6. Verify Super-Tree proofs (if present)

Online mode (additional steps):

7. Verify RFC 3161 TSA anchor certificates
8. Verify Bitcoin OTS anchor blockchain confirmations

Batch mode (additional checks):

• Cross-receipt verification (all receipts from same log instance)
• Log consistency proof verification

Mode selection

The CLI auto-detects internet connectivity:

1. If --offline specified → Offline mode
2. If --online specified → Online mode (error if no internet)
3. No anchors in receipt → Offline mode (no point checking internet)
4. Has anchors, auto-detect → Online if internet available, otherwise Offline

inspect

Display receipt contents without verification.

atl-cli inspect <receipt_file>

Parses and displays the structure of a receipt file. Does not verify against source file or check anchors.

Example:

atl-cli inspect document.pdf.atl

Output includes:

• Spec version
• Entry ID and hashes
• Merkle proof details
• Super-Tree proof (if present)
• Anchors (if present)
• Receipt tier (Lite / Tsa / Full)