CENSUS DERIVED-LIST(1)

NAME
census-derived-list - Census derived lists — opaque third-party...

SYNOPSIS
census derived-list [OPTIONS] {create|list|info|match|revoke|access-log|signature} [ARGS]...

DESCRIPTION
Census derived lists — opaque third-party hash verification.

    Create HMAC-SHA256 derived lists so third parties can check if their
    files match your inventory without seeing your actual hashes.

    Examples:
        census derived-list create --manifest ./manifest.db --label "Q1 2026"
        census derived-list create --tag-filter '{"and":[{"key":"dept","value":"legal"}]}'
        census derived-list list --json
        census derived-list info <list_id>
        census derived-list match <list_id> --list-key <hex64> --hashes-file suspects.txt
        census derived-list access-log <list_id>
        census derived-list signature <list_id>
        census derived-list revoke <list_id>

OPTIONS

--manifest PATH
    Manifest to read hashes from.

--tag-filter TEXT
    JSON tag filter (e.g. '{"and":[{"key":"dept","value":"legal"}]}').

--label TEXT
    Human-readable label for the list.

--expires INTEGER RANGE
    Expiry in hours (1–2160, i.e. max 90 days). [1<=x<=2160]

--list-key TEXT
    HMAC list key (64 hex chars) for match.

--hashes-file PATH
    File with one hash per line for match.

--limit INTEGER
    Max access log entries. Default: 50.

--api-key TEXT
    CertiSigma API key.

--base-url TEXT
    API base URL override.

--json
    Output as JSON.