kosa8 docs

Commands / kosa8 policy

kosa8 policy

Org policy profiles: signed, verified, enforced client-side

An org ships a signed policy profile (allowed registries, egress defaults, sandbox requirements). A developer's daemon enforces it but cannot weaken it — only a profile signed by the trusted key installs.

Subcommands

kosa8 policy initPrint a template policy profile to edit and sign kosa8 policy installVerify a signed profile against the trusted key and activate it kosa8 policy keygenGenerate an ed25519 signing keypair kosa8 policy showShow the active policy kosa8 policy signSign a profile with an ed25519 private key kosa8 policy trustTrust a public key as the policy signer