# CLI Tools

## Module
Cli

## Status
IMPLEMENTED

## Description
CLI tooling exists for verdict attestation verification and provenance attestation tooling.

## Implementation Details
- **Command Group**: `src/Cli/StellaOps.Cli/Commands/ToolsCommandGroup.cs` -- `ToolsCommandGroup` for `stella tools` commands
- **Verdict Verifier**: `src/Cli/StellaOps.Cli/Services/VerdictAttestationVerifier.cs` -- verdict attestation verification
- **DSSE Verifier**: `src/Cli/StellaOps.Cli/Services/DsseSignatureVerifier.cs` / `IDsseSignatureVerifier.cs` -- DSSE signature verification
- **Tests**: `src/Cli/__Tests/StellaOps.Cli.Tests/Commands/ToolsCommandGroupTests.cs`
- **Commands**:
  - `stella tools verify-verdict <attestation>` -- verify verdict attestation
  - `stella tools verify-provenance <attestation>` -- verify provenance attestation

## E2E Test Plan
- [ ] Run `stella tools verify-verdict ./verdict.json` and verify attestation validation
- [ ] Run `stella tools verify-provenance ./provenance.json` and verify provenance validation
- [ ] Verify verification fails for invalid attestations with clear error messages
- [ ] Verify `--format json` output for automation
- [ ] Verify offline verification works without network