skarbiec capability challenge

Invocation#

printf '%s' '<digits>' | skarbiec capability challenge <challenge:resource>

Purpose#

Store the digits delivered to a trusted device for an already-authorized one-use challenge resource.

Required inputs and options#

• Requires exactly one challenge: resource and a non-empty digits-only code on stdin.

Output and state effects#

• Stores the code as an encrypted note tied to that resource, appends the non-secret audit record challenge-stored, and prints status stored plus resource.

Refusals#

• capability challenge requires exactly one resource; capability challenge only stores a challenge: resource; no capability names <resource>; nothing authorized this challenge; capability challenge reads the code from stdin and received nothing; a challenge code is digits only.