<package> is the path to the agent package directory — the one containing manifest.yaml.
No API key and no network are required. The CLI runs the deterministic lanes only.
Options
--json is the only output-format switch. Text is the default.
Lanes
Output
Human output, the default:--json, one report object:
Each flag object:
id is sha256(rule_id + artifact_target + violation_class). It is stable across runs, so --ignore <id> keeps working even when a rationale is rephrased.
Exit codes
The command exits with the report’s own
exit_code, so it drops straight into CI:
jstm agent conformance
agent conform runs the engine locally over a package directory. agent conformance reads back the report the platform stored when it built the agent — the same Conform gate the Evidence tab shows.
structural PASS means the deterministic lanes passed and the judge lane did not run. Plain PASS means the judge ran too. A failure prints the flag count. A stale report — one produced against an older version of the plan — is called out with a warning line.
An agent that has never been built reports No conform report yet — run a build to conform this agent.
--json emits the endpoint payload verbatim: passed, flags, lanes_run, package_version, is_stale, status.
See also
- Agent package conformance — the concept.
- Reading the flag report — every field.
- Acknowledging flags — ignores, allowlists, baselines.