# DeltaSig CLI Module

## Module
Cli

## Status
IMPLEMENTED

## Description
Proposed CLI module for creating, signing, verifying, and packing ELF delta signatures. The BinaryDiff attestation predicates exist as the backend foundation.

## Implementation Details
- **Command Group**: `src/Cli/StellaOps.Cli/Commands/DeltaSig/DeltaSigCommandGroup.cs` -- `DeltaSigCommandGroup` (internal static class)
- **Command Handlers**: `src/Cli/StellaOps.Cli/Commands/DeltaSig/DeltaSigCommandHandlers.cs` -- `DeltaSigCommandHandlers`
- **Binary Commands**: `src/Cli/StellaOps.Cli/Commands/Binary/DeltaSigCommandGroup.cs` -- binary-level delta sig
- **Tests**: `src/Cli/__Tests/StellaOps.Cli.Tests/DeltaSigCommandTests.cs`
- **Commands**:
  - `stella deltasig create --old <binary> --new <binary>` -- create delta signature
  - `stella deltasig sign <deltasig>` -- sign a delta signature
  - `stella deltasig verify <deltasig>` -- verify delta signature integrity
  - `stella deltasig pack <deltasig> --output <path>` -- pack delta signature for distribution

## E2E Test Plan
- [ ] Run `stella deltasig create --old ./v1.elf --new ./v2.elf` and verify delta signature created
- [ ] Run `stella deltasig sign ./delta.sig` and verify cryptographic signing
- [ ] Run `stella deltasig verify ./delta.sig` and verify signature validation
- [ ] Run `stella deltasig pack ./delta.sig --output ./packed.tar.gz` and verify packed bundle
- [ ] Verify verification fails for tampered delta signatures
- [ ] Verify `--format json` output for automation