skarbiec duplicates

Invocation#

skarbiec duplicates

Purpose#

Report which active items hold exactly the same payload.

Required inputs and options#

• No positional input and no options.

Output and state effects#

• Prints groups, items, and one entry per group naming the shared kind and the ids that hold one payload, plus the coverage of the answer: active_items, compared, and without_fingerprint. It compares the payload fingerprint each envelope carries, so it decrypts nothing and answers while GnuPG is the fault. The fingerprint itself is never printed: it is a digest of secret content.

Refusals#

• Fails rather than returning an empty report when the configured vault cannot be opened. An item written before fingerprints existed carries none and cannot be compared with anything; when any such item is present the report carries a note saying how many, so an empty duplicate list over an unstamped vault reads as nothing comparable rather than nothing duplicated. `skarbiec upgrade --apply` is what makes those items comparable.