opschain admin agent-release show
packs:agentspacks:agent-governance
opschain admin agent-release show <name>@<version> [-o json|yaml]
Shows one release in full — identity, current stage, lifecycle status
(active, or retired / revoked with who moved it, when and why),
type, artifact, signing-key fingerprint, creator — followed by its
promotion attestations (every stage move: completed, pending,
rejected or expired, who requested and decided it, and when) and its
rollover and lifecycle attestations (every rollover step —
started, instance drained, restart instructed, instance restarted,
canary held, continued, aborted, rolled back, finished, refused — plus
the retirement or revocation, each with the instance it concerns, the
actor and the rollover's correlation chain). This is the audit answer
"which release is this, who signed it, who promoted it to prod, and
which instances moved onto or off it".
With -o json (or -o yaml) the same answer is one machine document:
release (the identity, stage, lifecycle status, artifact, key and
creator as agent-release list renders them), promotions and
attestations (each entry in the API's own field names, e.g.
from_stage/to_stage/decided_by, kind/instance_id/rollover_id/
detail) — never the labelled lines.