CLI Tools Reference
The zcp CLI is your primary interface for managing deterministic infrastructure and auditing latency. The Truth Engine for jitter.
⚡ Quick Reference
| Command | What it does |
|---|---|
| zcp audit <action> | Measure Jitter Tax, audit infra & code |
| zcp bench | Benchmark signing latency vs cloud providers |
| zcp trace <action> | Trace and compare signing latency |
| zcp verify <path> | Verify Proof of Performance files |
| zcp upgrade / keys | Atomic upgrades & key rotation |
| zcp diligence | Generate Technical Diligence Package |
| zcp mfa <sub> | Multi-factor authentication setup |
| zcp init / build / deploy | Scaffold, build & deploy enclaves |
Installation
1curl -sL https://zerocopy.systems/zcp | bash
Audit Mode
Usage
zcp audit <action>
Measure your "Jitter Tax" and verify infrastructure health. Audit mode identifies performance leakage across your entire stack.
Available Actions
Action | Description |
|---|---|
| Audit host machine (kernel isolation, CPU pinning, Nitro compatibility) |
| Run sovereign code quality and security scan |
| Execute both infrastructure and code audits |
| Verify operational compliance and workflow hygiene |
| Active repair: automatically remediate detected infrastructure issues |
zcp audit --volume 10000000 --institutionalPerformance Benchmarking
Usage
zcp benchCompare ZeroCopy performance against legacy cloud providers. Generate institutional-grade reports for investment committees.
Benchmark Flags
Flag | Description |
|---|---|
| Generate high-fidelity alpha report for investment committees |
| Benchmark AI Tick-to-Decision latency |
| Number of iterations for statistical significance (Default: 1000) |
Latency Tracing
Usage
zcp trace <action>Measure signing latency across different infrastructure targets. Generate waterfall visualizations and compare performance.
Trace Actions
Action | Description |
|---|---|
| Execute latency measurements against a target infrastructure |
| Compare two targets side-by-side (e.g., KMS vs ZeroCopy) |
Trace Flags
Flag | Description |
|---|---|
| Infrastructure target: kms, fireblocks, zerocopy, local |
| Number of samples for statistical accuracy (Default: 100) |
| Output format: text, json, waterfall |
| Write results to file (optional) |
zcp trace run --target kms --iterations 100zcp trace compare --baseline kms --candidate zerocopyProof Verification
Usage
zcp verify <path>
Verify cryptographic Proof of Performance (proof.json) files. Hardware attestation ensures proofs were generated inside a genuine Nitro Enclave.
Verification Modes
Command | Description |
|---|---|
| Verify a single proof file with hardware attestation check |
| Batch Mode: Verify a directory of proofs and generate summary |
zcp verify ./reports --jsonLifecycle Management
Atomic Upgrades
Usage
zcp upgrade --eif <path>
Perform zero-downtime, atomic swaps of enclave images while preserving state. The new enclave only activates after cryptographic verification.
Key Rotation
Command
zcp keys <subcommand>
Subcommand | Description |
|---|---|
| View current key epoch and health signals |
| Initiate an Enclave-local key rotation ceremony |
| View historical key indices and fingerprints |
| Configure rotation schedules and drainage periods |
Technical Diligence
Usage
zcp diligence --output <path>
Generate a comprehensive Technical Diligence Package (ZIP) containing audit reports, performance traces, and reproduction scripts. Ideal for institutional compliance handoffs.
Security & MFA
Usage
zcp mfa <subcommand>
Protect sensitive operations with multi-factor authentication.
Subcommand | Description |
|---|---|
| Generate a new MFA secret and QR code |
| Test your MFA configuration |
Project Initialization
Command | Description |
|---|---|
| Scaffold a new Deterministic Enclave project |
| Build a reproducible Enclave Image File (EIF) |
| Push verified EIF to AWS Nitro infrastructure |
Global Flags
These flags work with any zcp command:
Flag | Short | Description |
|---|---|---|
| -v | Enable detailed debug output |
| -j | Output results in machine-readable JSON |
| -q | Minimal output; only show final results |
| -h | Show help information for any command |