truss mandate

Manage mandates — create, list, inspect, transition status, view action chains, and delegate authority.

Subcommands

truss mandate list

List mandates for the authenticated org.

OptionDescription
-l, --limit <n>Page size (default: 50)
-p, --page <n>Page number (default: 1)
-s, --status <status>Filter by status (active, expired, revoked, draft, review)
--jsonOutput as JSON
truss mandate list
truss mandate list -l 100 -p 1
truss mandate list -s active
truss mandate list -s draft,review
truss mandate list --json

truss mandate get <mandate-id>

Get mandate details — ID, version, agent, status, template, issuer key, action count, created date, and reason.

OptionDescription
--jsonOutput as JSON
truss mandate get mnd_abc123
truss mandate get mnd_abc123 --json

truss mandate chain <mandate-id>

Get the action chain for a mandate — an ordered list of every action recorded against it.

OptionDescription
--jsonOutput as JSON
truss mandate chain mnd_abc123
truss mandate chain mnd_abc123 --json

truss mandate status <mandate-id> <status>

Transition a mandate's lifecycle status.

OptionDescription
--reasonReason for the status transition

Valid statuses (in lifecycle order): draftreviewactiveexpired. revoked is valid from any state.

truss mandate status mnd_abc123 active --reason "All checks passed"
truss mandate status mnd_abc123 review
truss mandate status mnd_abc123 revoked --reason "Scope violation detected"
truss mandate status mnd_abc123 expired

truss mandate delegate <parent-id> <child-id>

Delegate authority from one mandate to another (cross-agent or cross-org).

OptionDescription
--delegating-agent(Required) Delegating agent ID
--receiving-agent(Required) Receiving agent ID
--receiving-org(Required) Receiving org ID
--scope-reduction(Required) Comma-separated actions the child is restricted to
--cross-boundaryMark this as a cross-boundary delegation
--boundary-typeType of boundary crossed: jurisdiction, organization, regulatory_framework
--signatureCryptographic signature for verification
truss mandate delegate mnd_parent mnd_child \
  --delegating-agent agt_a \
  --receiving-agent agt_b \
  --receiving-org org_xyz \
  --scope-reduction read,query

truss mandate delegate mnd_a mnd_b \
  --delegating-agent agt_a \
  --receiving-agent agt_c \
  --receiving-org org_xyz \
  --scope-reduction read \
  --cross-boundary \
  --boundary-type jurisdiction \
  --signature "MEUCIQD..."