skarbiec credential resolve-quarantine

Invocation#

skarbiec credential resolve-quarantine <item-id> --confirm 'I know which password this provider account accepts' [--staged keep|activate|discard] --as <consumer> --token-file <path> --local

Purpose#

Settle a credential quarantined after an uncertain provider effect using an explicit operator decision.

Required inputs and options#

• Requires item id, the exact confirmation sentence, authenticated consumer/token file, and --local. --staged selects keep, activate, or discard when a candidate exists.

Output and state effects#

• Applies the selected staged-state decision, clears quarantine only under the admin contract, and records the resolution.

Refusals#

• Refuses remote mode, a different confirmation sentence, unsafe/mismatched token, missing quarantine, invalid staged decision, or a consumer without the required admin capability.