Encrypted project environment commands
pinset trust add
Approve automatic environment injection for the current canonical project and its exact environment policy.
View source on GitHub ↗| Field | Description |
|---|---|
| Purpose | Approve automatic environment injection for the current canonical project and its exact environment policy. |
| Syntax and arguments | pinset trust add [--project-id <id>] [--cwd <path>]. The optional ID makes automation fail if the checked-out project has a different project-id. |
| Modifies state | Yes. Writes a local trust record under PINSET_HOME/state/trust; nothing is added to the repository. |
| Example | pinset trust add --project-id 4c5652e4-0000-4000-8000-000000000000 |
| JSON | No. |
| Key errors | No environment configuration/project ID, expected ID mismatch, unsafe project root, or trust-store write failure. |
Trust binds the canonical root, project-id, auto-profile, collision policy, every profile path, and every recipient. Changing any of these requires renewed trust; changing only encrypted variable values does not. Trust does not make project code safe.
/en/docs/commands/trust-addPinset 2.1