> ## Documentation Index
> Fetch the complete documentation index at: https://docs.kombify.io/llms.txt
> Use this file to discover all available pages before exploring further.

# stackkit federation

> Manage local Federation binding evidence

Manage local Federation binding evidence.

```bash theme={null}
stackkit federation [flags]
```

Subcommands: [`stackkit federation binding`](#stackkit-federation-binding), [`stackkit federation control`](#stackkit-federation-control), [`stackkit federation link`](#stackkit-federation-link)

## stackkit federation binding

Manage opaque external Federation-link bindings.

```bash theme={null}
stackkit federation binding [flags]
```

Subcommands: [`stackkit federation binding adopt`](#stackkit-federation-binding-adopt), [`stackkit federation binding import`](#stackkit-federation-binding-import)

### stackkit federation binding adopt

Validate, Owner-sign, and atomically adopt an external binding.

Aliases: `approve`

```bash theme={null}
stackkit federation binding adopt [flags]
```

| Flag              | Type   | Default | Description                                                                    |
| ----------------- | ------ | ------- | ------------------------------------------------------------------------------ |
| `--binding`       | string | —       | Workspace-confined unsigned external Federation binding JSON                   |
| `--inventory`     | string | —       | Workspace-confined inventory.json to update atomically                         |
| `--resolved-plan` | string | —       | Workspace-confined canonical ResolvedPlan (otherwise derived beside Inventory) |

### stackkit federation binding import

Admit an Owner-signed opaque binding into local Inventory.

```bash theme={null}
stackkit federation binding import [flags]
```

| Flag              | Type   | Default | Description                                                                    |
| ----------------- | ------ | ------- | ------------------------------------------------------------------------------ |
| `--admission`     | string | —       | Workspace-confined Owner-signed Federation binding admission JSON              |
| `--inventory`     | string | —       | Workspace-confined inventory.json to update atomically                         |
| `--resolved-plan` | string | —       | Workspace-confined canonical ResolvedPlan (otherwise derived beside Inventory) |

## stackkit federation control

Execute Home-authorized plan and verify at the selected Cloud node.

```bash theme={null}
stackkit federation control [flags]
```

Subcommands: [`stackkit federation control bind`](#stackkit-federation-control-bind), [`stackkit federation control send`](#stackkit-federation-control-send), [`stackkit federation control sign`](#stackkit-federation-control-sign), [`stackkit federation control withdraw`](#stackkit-federation-control-withdraw)

### stackkit federation control bind

Admit exact public Home authority and local receiver custody.

```bash theme={null}
stackkit federation control bind [flags]
```

| Flag     | Type   | Default | Description                                           |
| -------- | ------ | ------- | ----------------------------------------------------- |
| `--file` | string | —       | Owner-reviewed receiver custody JSON; no private keys |

### stackkit federation control send

Send the signed action over an exact Home-initiated mTLS connection.

```bash theme={null}
stackkit federation control send [flags]
```

| Flag              | Type   | Default | Description                                              |
| ----------------- | ------ | ------- | -------------------------------------------------------- |
| `--endpoint-file` | string | —       | Local pinned mTLS endpoint and confined credential paths |
| `--file`          | string | —       | Home-signed action JSON                                  |

### stackkit federation control sign

Sign one exact short-lived action with current Home custody.

```bash theme={null}
stackkit federation control sign [flags]
```

| Flag     | Type   | Default | Description                                                     |
| -------- | ------ | ------- | --------------------------------------------------------------- |
| `--file` | string | —       | Exact action JSON with plan hash, target and bounded timestamps |

### stackkit federation control withdraw

Persistently withdraw receiver authority, including existing TLS sessions.

```bash theme={null}
stackkit federation control withdraw [flags]
```

## stackkit federation link

Bind and stop the local portion of an external Federation fabric.

```bash theme={null}
stackkit federation link [flags]
```

Subcommands: [`stackkit federation link bind`](#stackkit-federation-link-bind), [`stackkit federation link stop`](#stackkit-federation-link-stop)

### stackkit federation link bind

Adopt external WireGuard handles into local Owner custody.

```bash theme={null}
stackkit federation link bind [flags]
```

| Flag     | Type   | Default | Description                                            |
| -------- | ------ | ------- | ------------------------------------------------------ |
| `--file` | string | —       | External fabric custody JSON; contains no private keys |

### stackkit federation link stop

Stop the adopted interface without deleting the external fabric.

```bash theme={null}
stackkit federation link stop [flags]
```

| Flag           | Type   | Default | Description                           |
| -------------- | ------ | ------- | ------------------------------------- |
| `--fabric-ref` | string | —       | Exact adopted opaque fabric reference |