oz0 subject export
For: Operators and developers looking up a command.
Write one person's data into a new folder (or a tar file) to answer their request for a copy. The bundle contains:
- index.html to read in a browser (no network, no script).
- subject.json: their jobs with the dates each is kept until; erasures and what waits for a keep-for period and why; restrictions and objections; decision records and contests; and the purposes their jobs named and the tenant's legal basis for each.
- The audit entries about them and where the agents that ran their jobs can send data.
- Content read by an edge with the person's keys: what their jobs read and wrote, the board notes and memory records of their job trees, and the chats of the account linked to them.
A member whose sign-in name is the person's ID is linked by itself; --account links another, and the export's audit entry records it. Another member's private chat is never in it with what was said.
Jobs past the cluster's history retention are listed with their records and a warning. In its records staff appear by role, never by name; what the jobs read and wrote is as it was written.
The bundle is signed with the cluster's audit key and the edge's part with its gateway key. It needs subjects.find and the content permission, and is audited about the person.
--verify PATH checks a bundle (a folder or a tar file) without the cluster and the network: the signatures, every file's size and SHA-256, no file missing or added. Pin the audit key with --key. Exit status 0 means it verifies, 1 a check failed, 2 the bundle could not be read.
Usage
oz0 subject export SUBJECT --out DIR [flags]
Flags
| Flag | Type | Default | Description |
|---|---|---|---|
--account | string | the member account that is this person, whose chats the bundle holds (recorded in the audit log) | |
--json | bool | with --verify: print the result as JSON | |
--key | string | with --verify: the audit key's fingerprint (or public key) the bundle must be signed with | |
--out | string | a new or empty folder to write the bundle to | |
--tar | string | write the bundle as one tar file instead (it must not exist) | |
--timeout | duration | give up when the export takes longer than this (0: no limit) | |
--verify | string | check the bundle at this folder or tar file offline instead of exporting |
Inherited flags
| Flag | Type | Default | Description |
|---|---|---|---|
--context | string | $OZ0_CONTEXT or <config dir>/orchestrator-zero/context.json | CLI context file written by server init |
--log-level | string | info | log level: debug, info, warn or error |
--tenant | string | default | the tenant |
See all oz0 commands and the global flags.