skarbiec grant list

Invocation#

skarbiec grant list

Purpose#

List consumer grant metadata without returning bearer hashes or public-key contents.

Required inputs and options#

• No positional input or command-specific option.

Output and state effects#

• Prints consumer, exact capabilities, workload_bound, audience, expires_at and until_revoked for every grant; until_revoked is true for a grant issued --until-revoked or kept with grant keep, so a reader never compares expires_at with the value that stands for no end. It is read-only.

Refusals#

• Fails when the vault cannot be opened or holds no grant section, and never prints bearer values, stored hashes, or workload public keys.