Artifact block explanation: withdrawn
The top-level artifact block explanation command is unavailable. PCD-448 withdrew its online and offline lookup branches on 2026-10-07. The CLI rejects the command with usage-error exit code 2 before requesting an owner service or writing output.
Owner contract boundary
Policy publishes two different reads:
GET /api/v1/policy/gate/decision/{decisionId}returns a decision from a thirty-minute memory cache. Its identity is a decision ID, not an artifact digest.POST /api/v1/policy/gate/decisions/by-digestacceptsimageDigestsand returns the newest durable summary for each supplied digest:imageDigest,gateStatus,verdictHashandevaluatedAt. It does not return the command’s explanation, evaluation trace, evidence references or replay token.
Evidence’s verdict read uses a verdict ID. It provides no artifact-to-verdict lookup and no local verdict-cache provider for this command. An HTTP request to an owner service cannot constitute offline execution.
The withdrawn command had treated a wrong-route or wrong-identity 404 as a missing artifact and supplied invented replay tokens and timestamps for incomplete responses. The CLI now emits no explanation, evidence reference, replay token or artifact-presence verdict from either branch. Denied access, missing owner data and provider availability require an actual supported owner operation; a rejected command establishes none of those states.
Verification and limits
Source contracts were reviewed at 822dd326f7aa2d0ae02006462c14c69f1054ae39. Withdrawal was implemented at 8ef9204d1c. The command withdrawal and parser behavior are covered by the real CLI command tests, rather than copies of its former rendering helpers. Recheck with:
pwsh tools/scripts/test-targeted-xunit.ps1 -Project src/Cli/__Tests/StellaOps.Cli.Tests/StellaOps.Cli.Tests.csproj -Class '*ExplainBlockWithdrawalTests' -BuildProjectReferences
This is a source and local command-path disposition. It does not claim a runtime deployment, owner availability, a policy decision or an artifact’s existence. The original implementation and helper-only tests remain frozen with Git history under src/__Obsoleted/Cli/.
See the Policy architecture, Evidence architecture and CLI command reference for their current boundaries.