truss mandate
Manage mandates — create, list, inspect, transition status, view action chains, and delegate authority.
Subcommands
truss mandate list
List mandates for the authenticated org.
| Option | Description |
|---|---|
-l, --limit <n> | Page size (default: 50) |
-p, --page <n> | Page number (default: 1) |
-s, --status <status> | Filter by status (active, expired, revoked, draft, review) |
--json | Output as JSON |
truss mandate list
truss mandate list -l 100 -p 1
truss mandate list -s active
truss mandate list -s draft,review
truss mandate list --json
truss mandate get <mandate-id>
Get mandate details — ID, version, agent, status, template, issuer key, action count, created date, and reason.
| Option | Description |
|---|---|
--json | Output as JSON |
truss mandate get mnd_abc123
truss mandate get mnd_abc123 --json
truss mandate chain <mandate-id>
Get the action chain for a mandate — an ordered list of every action recorded against it.
| Option | Description |
|---|---|
--json | Output as JSON |
truss mandate chain mnd_abc123
truss mandate chain mnd_abc123 --json
truss mandate status <mandate-id> <status>
Transition a mandate's lifecycle status.
| Option | Description |
|---|---|
--reason | Reason for the status transition |
Valid statuses (in lifecycle order): draft → review → active → expired. revoked is valid from any state.
truss mandate status mnd_abc123 active --reason "All checks passed"
truss mandate status mnd_abc123 review
truss mandate status mnd_abc123 revoked --reason "Scope violation detected"
truss mandate status mnd_abc123 expired
truss mandate delegate <parent-id> <child-id>
Delegate authority from one mandate to another (cross-agent or cross-org).
| Option | Description |
|---|---|
--delegating-agent | (Required) Delegating agent ID |
--receiving-agent | (Required) Receiving agent ID |
--receiving-org | (Required) Receiving org ID |
--scope-reduction | (Required) Comma-separated actions the child is restricted to |
--cross-boundary | Mark this as a cross-boundary delegation |
--boundary-type | Type of boundary crossed: jurisdiction, organization, regulatory_framework |
--signature | Cryptographic signature for verification |
truss mandate delegate mnd_parent mnd_child \
--delegating-agent agt_a \
--receiving-agent agt_b \
--receiving-org org_xyz \
--scope-reduction read,query
truss mandate delegate mnd_a mnd_b \
--delegating-agent agt_a \
--receiving-agent agt_c \
--receiving-org org_xyz \
--scope-reduction read \
--cross-boundary \
--boundary-type jurisdiction \
--signature "MEUCIQD..."