strazactl drafts publish

Publish a draft whole, after acknowledging every line that widens access

On this page

Synopsis

Checks the draft against live state now and prints each line that widens access. A line that names a text to type is acknowledged by typing that text. The last question acknowledges every other line. The server checks the draft again as it publishes, and an object that changed since refuses the publish, so nothing is written. Only a person publishes, so an admin API token and an agent cannot.

strazactl drafts publish <id> [flags]

Options

      --ack stringArray   the text a typed risk asks for, as its line shows it (repeatable)
      --json              print the server's JSON answer, indented, and nothing else on stdout
      --yes               publish without the questions: every risk shown is acknowledged, and each typed risk needs its --ack

Options inherited from parent commands

      --server string   strazad base URL (overrides $STRAZA_SERVER and the server you logged into)

See also

• strazactl drafts: Check, store, review and publish drafts of changes to MCP servers, roles, access rows and policy sets