# Reachability, drift, and smart-diff CLI Reachability commands - reachability compute: compute reachability for a scan or graph snapshot. - reachability findings: list reachability findings with filters. - reachability explain: explain a finding and show paths. - reachability summary and job status/logs for batch workflows. Common options - --scan-id selects the scan. - --offline uses local bundles and caches. - --output-format supports table, json, yaml, sarif. Drift commands - drift compare: compare reachability between base and head scans. - drift show: display a saved drift result. - Filters include severity, risk increases only, and output format. Smart-diff commands - smart-diff compares two artifacts and reports material risk changes. - Output supports table, json, yaml, and sarif plus bundle output. - Options include min-priority, tier filters, and offline feed dirs. Proofs and verification - smart-diff verify validates proof bundles and signatures. - Use public keys or trust policy for verification. Related references - docs/cli/reachability-cli-reference.md - docs/cli/drift-cli.md - docs/cli/smart-diff-cli.md