Tools
The tools exist to simplify the rituals you learn about in Learn. They are not a reason to skip learning: a tool that signs the wrong thing signs it quickly.
| Tool | What it is | Status |
|---|---|---|
| The command line | One to three commands for each ceremony, with a plan, a confirmation, a record and the checks before every touch. | Planned (M1 to M3) |
| The wizard | A guided front end in the terminal, and a web page served on your own computer only. | Planned (M4) |
| Command reference | The commands, flags, files and exit codes. | Specified |
One engine, two faces
Section titled “One engine, two faces”The command line and the wizard are two faces of the same ceremony engine: plan, confirm, reserve, sign, verify, record (ADR 0004). The wizard fills in flags and shows the plan; it does not implement a ceremony of its own. What the command line refuses, the wizard refuses.
What the tools never do
Section titled “What the tools never do”- Hold a private key outside the store that made it, or keep a PIN or a passphrase.
- Confirm an irreversible step for you.
- Sign online, or issue the certificates of servers and people. That belongs to a system that holds intermediates.