CLI grammar: cre run daemon (sqlite or postgres) cre watch daemon + live TUI in same process cre check one-shot policy eval (CI-friendly exit codes) cre rotate <id> manual rotation cre policy list / show compile-time-baked policy registry inspection cre export --framework=X compliance bundle (Phase 14 stub) cre audit verify hash chain + HMAC + Merkle integrity verification cre demo Tier 1 demo (Phase 15 stub) cre version version cre help usage Output module: human / json / ndjson formatter; CI-friendly exit codes (0 ok, 1 violations/error, 64 usage, 2 audit-chain-broken). run/watch wire engine + persistence + scheduler + evaluator + log notifier (and TUI for watch); SIGINT triggers graceful shutdown. 7 unit specs cover usage / version / policy-list-empty / policy-show-404 / unknown-subcommand / check-no-violations. All commands callable end-to-end against a working binary. |
||
|---|---|---|
| .. | ||
| .github/workflows | ||
| spec | ||
| src | ||
| .editorconfig | ||
| .gitignore | ||
| LICENSE | ||
| Makefile | ||
| README.md | ||
| shard.lock | ||
| shard.yml | ||
README.md
Credential Rotation Enforcer (cre)
A Crystal-based daemon that tracks and enforces credential rotation
policies across AWS Secrets Manager, HashiCorp Vault, GitHub fine-grained
PATs, and local .env files.
Full README, asciinema demos, and walkthrough live in
learn/. This README will be expanded in Phase 16 of the build.