CLI reference
approve / deny
Review and act on pending approval requests.
treeship pending
List all pending approval requests.
treeship pendingOutput:
Pending approvals (2)
1. kubectl apply -f deploy.yaml
label: deploy to prod | requested 2m ago
hint: treeship approve 1
2. stripe charge --amount 500
label: charge customer acme | requested 5m ago
hint: treeship approve 2Use the numbered index to approve or deny a specific request.
treeship approve
Approve a pending request by number.
treeship approve 1This creates an approval artifact, generates a single-use nonce, and passes it back to the requesting agent. The agent can then include the nonce in its action attestation to prove it had authorization.
treeship deny
Deny a pending request by number.
treeship deny 2This creates a denial artifact. The requesting agent receives the denial and should not proceed with the action.
Approvals are single-use. If the same nonce is used in two action attestations, the second one will fail verification. This is enforced in the Rust core and cannot be bypassed.