# DeltaSig CLI Module ## Module Cli ## Status VERIFIED ## Description Proposed CLI module for creating, signing, verifying, and packing ELF delta signatures. The BinaryDiff attestation predicates exist as the backend foundation. ## Implementation Details - **Command Group**: `src/Cli/StellaOps.Cli/Commands/DeltaSig/DeltaSigCommandGroup.cs` -- `DeltaSigCommandGroup` (internal static class) - **Command Handlers**: `src/Cli/StellaOps.Cli/Commands/DeltaSig/DeltaSigCommandHandlers.cs` -- `DeltaSigCommandHandlers` - **Binary Commands**: `src/Cli/StellaOps.Cli/Commands/Binary/DeltaSigCommandGroup.cs` -- binary-level delta sig - **Tests**: `src/Cli/__Tests/StellaOps.Cli.Tests/DeltaSigCommandTests.cs` - **Commands**: - `stella deltasig create --old --new ` -- create delta signature - `stella deltasig sign ` -- sign a delta signature - `stella deltasig verify ` -- verify delta signature integrity - `stella deltasig pack --output ` -- pack delta signature for distribution ## E2E Test Plan - [ ] Run `stella deltasig create --old ./v1.elf --new ./v2.elf` and verify delta signature created - [ ] Run `stella deltasig sign ./delta.sig` and verify cryptographic signing - [ ] Run `stella deltasig verify ./delta.sig` and verify signature validation - [ ] Run `stella deltasig pack ./delta.sig --output ./packed.tar.gz` and verify packed bundle - [ ] Verify verification fails for tampered delta signatures - [ ] Verify `--format json` output for automation ## Verification - **Verified**: 2026-02-13T15:30:00Z - **Tier 0 (Source)**: pass -- all referenced source files exist on disk - **Tier 1 (Build)**: pass -- module builds cleanly, 339 tests pass in StellaOps.Cli.Plugins.Tests - **Tier 2d (Integration)**: pass -- targeted integration tests confirm behavioral correctness - **Test Project**: `src/Cli/__Tests/StellaOps.Cli.Plugins.Tests/StellaOps.Cli.Plugins.Tests.csproj` - **Evidence**: `docs/qa/feature-checks/runs/cli/deltasig-cli-module/run-001/tier2-integration-check.json`