Knolo Verify action

Knolo Verify is a composite GitHub Action. It runs a pinned @knolo/cli over committed packs, images, KAR artifacts, attestations, and Cortex traces. It does not add verification rules, build packs, call a model, or talk to Hub.

Pin the action to a commit. cli-version is required and must be an exact version. The action installs it with npm install --global --ignore-scripts. Node defaults to 20.

YAMLyaml

- uses: actions/checkout@v5
  with:
    fetch-depth: 0
- uses: HiveForensics-AI/knolo-core/.github/actions/knolo-verify@<commit>
  with:
    cli-version: 6.2.0
    packs: dist/*.knolo
    images: dist/knowledge.v5
    kar-graphs: dist/knowledge.v5=dist/knowledge.kar.json
    attestations: attestations/cited.json
    cortex-traces: dist/knowledge.v5=traces/answer.cortex.json

Input	Command
`packs`	`knolo verify`
`images`	`knolo v5 health`
`kar-graphs`	`knolo kar graph check`
`kar-dossiers`	`knolo kar dossier verify`
`kar-coverage`	`knolo kar coverage verify`
`compositions`	`knolo compose verify`
`attestations`	`knolo verify-attestation`
`cortex-traces`	`knolo cortex verify`
`diff-base`	`knolo diff` for V4 packs

knolo kar conformance is not included. That command runs from a Knolo Core checkout. diff-base needs a commit that the checkout can already resolve, so a shallow clone needs fetch-depth: 0. fail-on-diff defaults to false.

A passing job means the pinned CLI accepted the artifacts. It does not mean a claim is true. SATISFIED still means evidence requirements were met.