Query and lifecycle commands
pinset lock audit
Audit one project or global configuration/lock pair, its current-platform artifacts, relevant content-addressed cache entries, install receipts, and receipt-backed ownership. Project Python selections also audit the .venv ownership marker.
View source on GitHub ↗| Field | Description |
|---|---|
| Purpose | Audit one project or global configuration/lock pair, its current-platform artifacts, relevant content-addressed cache entries, install receipts, and receipt-backed ownership. Project Python selections also audit the .venv ownership marker. |
| Syntax and arguments | `pinset lock audit [--global |
| Modifies state | No. The command is always read-only, never runs a repair plan, and never contacts Provider metadata or archive services. Cache checks hash only entries referenced by the selected current-platform artifacts. |
| Example | pinset lock audit --cwd ./app --json |
| JSON | Yes; command name lock.audit. A completed audit uses ok: true even when data.passed is false. Stable reason_code, severity, category, subject, optional path, and optional repair fields are returned under data.findings. |
| Exit | 0 when there are no errors or warnings; 1 when the audit completes with action-required errors/warnings; 2 only when command parsing or audit startup itself fails. An optional cache miss is informational and does not cause exit 1. |
| Key findings | Missing/invalid/legacy configuration or lock state, selector drift, unsupported Providers, missing current-platform artifacts, missing/corrupt/unsafe cache entries, missing/unsafe installations, invalid or mismatched receipts, and invalid Python environment ownership. |
Stable reason codes are grouped as follows:
- Configuration and lock:
config_missing,config_invalid,config_schema_legacy,lock_missing,lock_invalid,lock_schema_legacy,lock_tool_missing,lock_tool_unconfigured,lock_selector_mismatch. - Provider and platform:
provider_unsupported,provider_audit_unsupported,platform_artifact_missing,platform_artifact_invalid. - Cache:
cache_entry_missing,cache_entry_corrupt,cache_entry_unsafe,cache_entry_unreadable. - Receipt and ownership:
install_missing,install_path_unsafe,receipt_missing,receipt_unreadable,receipt_invalid,receipt_schema_legacy,receipt_schema_unsupported,receipt_incomplete,receipt_identity_mismatch,receipt_integrity_missing,receipt_integrity_mismatch,receipt_overlay_mismatch,python_environment_missing,python_environment_ownership_invalid.
/en/docs/commands/lock-auditPinset 2.1