# kindgi provenance

> Provenance records: each run's graph of what ran (list / get / export, signed)

## `kindgi provenance`

**Synopsis**

```sh signature
kindgi provenance <command>
```

Provenance records: each run's graph of what ran (list / get / export, signed).

**Commands**

| Command                                                                                                           | Description                                                                 |
| ----------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------- |
| [`kindgi provenance list`](https://docs.kindgi.com/v0.1.8/reference/cli/provenance.md#kindgi-provenance-list)     | List provenance records, one per run: what ran, in what order, with what.   |
| [`kindgi provenance get`](https://docs.kindgi.com/v0.1.8/reference/cli/provenance.md#kindgi-provenance-get)       | A run's provenance record: its graph of what ran, in what order, with what. |
| [`kindgi provenance export`](https://docs.kindgi.com/v0.1.8/reference/cli/provenance.md#kindgi-provenance-export) | Export a run's provenance, signed with the deployment's export key.         |

**See also**

- [Export signed evidence](https://docs.kindgi.com/v0.1.8/guides/observability/export-signed-evidence.md)
- [Trace an answer and its cost](https://docs.kindgi.com/v0.1.8/guides/observability/trace-an-answer.md)

### `kindgi provenance list`

**Synopsis**

```sh signature
kindgi provenance list [--run=<run-id>] [--agent=<agent-id>] [--created-after=<iso>] [--project=<project-id> | --org=<org-id>] [--limit=<n>] [--cursor=<c>]
```

List provenance records, one per run: what ran, in what order, with what.

**Options**

| Option                    | Default              | Description                                                                                         |
| ------------------------- | -------------------- | --------------------------------------------------------------------------------------------------- |
| `--agent <value>`         | none                 | Only the records of this agent's runs.                                                              |
| `--created-after <value>` | none                 | Only the records created after this time: an ISO 8601 time with a zone, or a date (its start, UTC). |
| `--cursor <value>`        | none                 | Resume after this cursor, from the previous page's `nextCursor`.                                    |
| `--limit <value>`         | `25` (at most `100`) | The most provenance records to return (default 25, at most 100).                                    |
| `--org <value>`           | none                 | Only the records of this org's projects.                                                            |
| `--project <value>`       | none                 | Only this project's records.                                                                        |
| `--run <value>`           | none                 | Only this run's record.                                                                             |

Every command also takes the [global flags](https://docs.kindgi.com/v0.1.8/reference/cli.md#global-flags).

**Examples**

From [Trace an answer and its cost](https://docs.kindgi.com/v0.1.8/guides/observability/trace-an-answer.md):

```sh
pnpm exec kindgi provenance list --created-after=2026-10-06T17:00:00Z --limit=3 --table
```

**See also**

- [Trace an answer and its cost](https://docs.kindgi.com/v0.1.8/guides/observability/trace-an-answer.md)
- [`kindgi provenance`](https://docs.kindgi.com/v0.1.8/reference/cli/provenance.md#kindgi-provenance)

### `kindgi provenance get`

**Synopsis**

```sh signature
kindgi provenance get <run-id>
```

A run's provenance record: its graph of what ran, in what order, with what.

**Options**

Every command also takes the [global flags](https://docs.kindgi.com/v0.1.8/reference/cli.md#global-flags).

**Examples**

From [Trace an answer and its cost](https://docs.kindgi.com/v0.1.8/guides/observability/trace-an-answer.md):

```sh
pnpm exec kindgi provenance get a64ce71c-9cfc-4263-87b1-b5562f09079c
```

**See also**

- [Trace an answer and its cost](https://docs.kindgi.com/v0.1.8/guides/observability/trace-an-answer.md)
- [`kindgi provenance`](https://docs.kindgi.com/v0.1.8/reference/cli/provenance.md#kindgi-provenance)

### `kindgi provenance export`

**Synopsis**

```sh signature
kindgi provenance export <run-id> [--signing-key=<key-id>] [--include-messages] > provenance.json
```

Export a run's provenance, signed with the deployment's export key. Check it with kindgi exports verify.

**Options**

| Option                  | Default                     | Description                                                                       |
| ----------------------- | --------------------------- | --------------------------------------------------------------------------------- |
| `--include-messages`    | off                         | Add the run's conversation messages to the bundle.                                |
| `--signing-key <value>` | the deployment's active key | Sign with this key (one the runtime lists). Default: the deployment's active key. |

Every command also takes the [global flags](https://docs.kindgi.com/v0.1.8/reference/cli.md#global-flags).

**Examples**

From [Export signed evidence](https://docs.kindgi.com/v0.1.8/guides/observability/export-signed-evidence.md):

```sh
pnpm exec kindgi provenance export 11a79b0a-ebdd-4d21-9e66-e0cacaea50e8 > provenance.json
```

**See also**

- [Export signed evidence](https://docs.kindgi.com/v0.1.8/guides/observability/export-signed-evidence.md)
- [`kindgi provenance`](https://docs.kindgi.com/v0.1.8/reference/cli/provenance.md#kindgi-provenance)
