CLI reference

A small command surface with hard safety edges.

The public commands are netokay version, netokay schema, and netokay diagnose [target]. HTTPS is the default transport.

Target syntax

Use one explicit public URL with http:80 or https:443. Query strings, fragments, userinfo, private names, arbitrary ports, and sensitive destinations fail closed.

Output

Stdout contains one JSON EvidenceBundle. The optional --out path is new-only, local, mode 0600, and byte-identical to stdout.