Merge branch 'main' of https://git.stella-ops.org/stella-ops.org/git.stella-ops.org

docs/modules/replay/replay-proof-schema.md

@@ -504,6 +504,52 @@ CREATE INDEX ix_replay_verifications_proof ON replay_verifications (proof_id);
 
 ## 9. CLI Integration
 
+### 9.1 stella prove
+
+Generate a replay proof for an image verdict (RPL-015 through RPL-019):
+
+```bash
+# Generate proof using local bundle (offline mode)
+stella prove --image sha256:abc123 --bundle /path/to/bundle --output compact
+
+# Generate proof at specific point in time
+stella prove --image sha256:abc123 --at 2026-01-05T10:00:00Z
+
+# Generate proof using explicit snapshot ID
+stella prove --image sha256:abc123 --snapshot snap-001
+
+# Output in JSON format
+stella prove --image sha256:abc123 --bundle /path/to/bundle --output json
+
+# Full table output with all fields
+stella prove --image sha256:abc123 --bundle /path/to/bundle --output full
+```
+
+**Options:**
+- `-i, --image <digest>` - Image digest (sha256:...) - required
+- `-a, --at <timestamp>` - Point-in-time for snapshot lookup (ISO 8601)
+- `-s, --snapshot <id>` - Explicit snapshot ID
+- `-b, --bundle <path>` - Local bundle path (offline mode)
+- `-o, --output <format>` - Output format: compact, json, full (default: compact)
+- `-v, --verbose` - Enable verbose output
+
+**Exit Codes:**
+| Code | Name | Description |
+|------|------|-------------|
+| 0 | Success | Replay successful, verdict matches expected |
+| 1 | InvalidInput | Invalid image digest or options |
+| 2 | SnapshotNotFound | No snapshot found for image/timestamp |
+| 3 | BundleNotFound | Bundle not found in CAS |
+| 4 | ReplayFailed | Verdict replay failed |
+| 5 | VerdictMismatch | Replayed verdict differs from expected |
+| 6 | ServiceUnavailable | Timeline or bundle service unavailable |
+| 7 | FileNotFound | Local bundle path not found |
+| 8 | InvalidBundle | Bundle manifest invalid |
+| 99 | SystemError | Unexpected error |
+| 130 | Cancelled | Operation cancelled |
+
+### 9.2 stella verify
+
 ```bash
 # Verify a replay proof (quick - signature only)
 stella verify --proof proof.json
@@ -513,7 +559,11 @@ stella verify --proof proof.json --replay
 
 # Verify from CAS URI
 stella verify --bundle cas://replay/660e8400.../manifest.json
+```
 
+### 9.3 stella replay
+
+```bash
 # Export proof for audit
 stella replay export --run-id 660e8400-... --output proof.json