git.stella-ops.org/docs/features/checked/cli/deltasig-cli-module.md

DeltaSig CLI Module

Module

Cli

Status

VERIFIED

Description

Proposed CLI module for creating, signing, verifying, and packing ELF delta signatures. The BinaryDiff attestation predicates exist as the backend foundation.

Implementation Details

• Command Group: src/Cli/StellaOps.Cli/Commands/DeltaSig/DeltaSigCommandGroup.cs -- DeltaSigCommandGroup (internal static class)
• Command Handlers: src/Cli/StellaOps.Cli/Commands/DeltaSig/DeltaSigCommandHandlers.cs -- DeltaSigCommandHandlers
• Binary Commands: src/Cli/StellaOps.Cli/Commands/Binary/DeltaSigCommandGroup.cs -- binary-level delta sig
• Tests: src/Cli/__Tests/StellaOps.Cli.Tests/DeltaSigCommandTests.cs
• Commands:
  • stella deltasig create --old <binary> --new <binary> -- create delta signature
  • stella deltasig sign <deltasig> -- sign a delta signature
  • stella deltasig verify <deltasig> -- verify delta signature integrity
  • stella deltasig pack <deltasig> --output <path> -- pack delta signature for distribution

E2E Test Plan

• Run stella deltasig create --old ./v1.elf --new ./v2.elf and verify delta signature created
• Run stella deltasig sign ./delta.sig and verify cryptographic signing
• Run stella deltasig verify ./delta.sig and verify signature validation
• Run stella deltasig pack ./delta.sig --output ./packed.tar.gz and verify packed bundle
• Verify verification fails for tampered delta signatures
• Verify --format json output for automation

Verification

• Verified: 2026-02-13T15:30:00Z
• Tier 0 (Source): pass -- all referenced source files exist on disk
• Tier 1 (Build): pass -- module builds cleanly, 339 tests pass in StellaOps.Cli.Plugins.Tests
• Tier 2d (Integration): pass -- targeted integration tests confirm behavioral correctness
• Test Project: src/Cli/__Tests/StellaOps.Cli.Plugins.Tests/StellaOps.Cli.Plugins.Tests.csproj
• Evidence: docs/qa/feature-checks/runs/cli/deltasig-cli-module/run-001/tier2-integration-check.json