tare check
tare check rebuilds a record from the record alone and tells you whether it holds.
Synopsis
$ tare check <RECORD>
What it does
- Reads the record from the registry.
- Fetches the source at the record’s commit.
- Builds both programs in the container the record’s toolchain version names.
- Reruns the proof over the record’s corpus.
- Compares the two build hashes, the corpus hash and the totals with the record.
What it reports
matches, or the first difference: which value differs, what the record says and what the rebuild gave. It needs nothing from the attester and no key.