skarbiec init

Invocation#

skarbiec init <owner-uid>

Purpose#

Create a new vault with an owner recipient and a separate recovery recipient.

Required inputs and options#

• Requires owner-uid as the first positional argument; --owner <owner-uid> is also accepted. The local GPG keyring supplies existing keys or receives newly generated ones.

Output and state effects#

• Creates the vault and any missing owner/recovery keys, then prints ok, vault, owner_fpr, and recovery_fpr as JSON.

Refusals#

• Refuses a missing owner identity and propagates key-generation or vault-creation failures instead of overwriting them.