CENSUS SEAL(1)

NAME
census-seal - Create an HMAC-SHA256 seal for a manifest.

SYNOPSIS
census seal [OPTIONS] MANIFEST_PATH

DESCRIPTION
Create an HMAC-SHA256 seal for a manifest.

    The seal is a tamper-evidence sidecar file (.seal) that proves the
    manifest has not been modified since it was sealed. Use 'verify-seal'
    to check integrity before trusting a manifest.

    Examples:
        census seal ./manifest.db --key $(census key-gen)
        census seal ./manifest.db --key <hex64> --json

OPTIONS

--key TEXT
    HMAC key (64 hex chars = 256 bits). Use 'census key-gen' to generate. [required]

--json
    Machine-readable JSON output.