skarbiec share

Invocation#

skarbiec share <item-id> <uid>

Purpose#

Grant a registered recipient cryptographic access to one item.

Required inputs and options#

• Requires one live item id and one registered recipient uid.

Output and state effects#

• Decrypts and re-encrypts the item to include the recipient, preserves kind/tags, appends audit, and prints the final recipient list.

Refusals#

• Returns status blocked with reason unknown_recipient when the uid is not registered; unreadable or missing items are not changed.