skarbiec route declare

Invocation#

skarbiec route declare --resource <resource> --item <item> --field <field> --reason <text>

Purpose#

State the one route a vault item cannot declare for itself, such as a sign-in form's origin:<page origin>/<field class>.

Required inputs and options#

• Requires exact non-empty --resource, --item, --field and --reason values.

Output and state effects#

• Idempotently writes a mode-0600 table, records the item's item_uid on the row when the item carries one, keeps a timestamped previous-table backup, appends adjacent and hash-chained audit records, and prints declared plus backup.

Refusals#

• Refuses missing or malformed values, a backup without a timestamp, repointing an existing resource to a different coordinate, and any resource a vault item already declares -- a provider:, agent: or login: name, or an exact coordinate -- because a hand row beside a declaration is a second answer to one question.