Verify

verify compares the current home tree against a target commit.

Basic usage

hometree verify
hometree verify --rev HEAD

Strict mode

Strict mode also checks permissions and unexpected files under managed roots:

hometree verify --strict

Secrets verification

Choose the secrets mode:

• skip: ignore secrets.
• presence: require plaintext on disk and ciphertext in the repo (default).
• decrypt: decrypt ciphertext from the repo and compare to plaintext.

hometree verify --with-secrets=presence
hometree verify --with-secrets=decrypt --show-paths

By default, plaintext secret paths are redacted. Use --show-paths to display them.

JSON output

hometree verify --json

verify exits non-zero if the report is not clean.