stella binary - Command Guide

Audience: engineers and analysts who need reproducible, byte-level evidence about compiled artifacts — what changed between two builds and how to fingerprint a binary for later comparison.

The stella binary command group provides binary-analysis primitives: deterministic fingerprinting (function, section, and symbol hashes) and function/symbol-level diffing between two binaries. Outputs are designed for offline workflows and evidence bundles, so the same input always produces the same artifact.

`stella binary fingerprint export`

Export a deterministic binary fingerprint (function hashes, section hashes, symbol table).

Usage

stella binary fingerprint export <artifact> \
  --format json \
  --output ./fingerprint.json

Notes

Supported formats: json, yaml
Output is deterministic for identical inputs.
Use --output for offline workflows and evidence bundles.

`stella binary diff`

Compare two binaries and emit a function/symbol-level delta report.

Usage

stella binary diff <base> <candidate> \
  --format table \
  --scope function

Notes

Supported formats: json, table
Scopes: file, section, function
Use --format json for automation and CI pipelines.

Output contracts

All JSON outputs follow the CLI standard envelope (stable ordering, camelCase keys).
When used in evidence workflows, prefer --format json plus --output for deterministic artifacts.

stella smart-diff — higher-level material-risk diff across image versions (includes binary hardening regressions)
Evidence Bundle Format — how binary-diff evidence is packaged for attestation and replay
stella symbols — symbol resolution and lookup

Last updated: 2026-01-16 (UTC)