Developers · CLI

Commands that
fail closed.

The CLI exposes bounded objects, checked streams and explicit failure behaviour. It never overwrites an existing output and verifies recovery before declaring success.

saar · CLI
bounded
$ saar verify input.saar
$ saar_native stream-compress --profile ratio \
  --chunk-size 4194304 --threads 8 < archive.tar > archive.sast
$ saar_native stream-decompress < archive.sast > restored.tar

Commands

Four surfaces, one recovery rule.

The commands below are the implemented interfaces. Access to the native CLI and TypeScript package is scoped through evaluation.

Object

Compress, inspect, restore

saar compress input.json
saar info input.saar
saar decompress input.saar -o restored.json
saar verify input.saar

The object path is for bounded files. A successful decode returns the original bytes and the envelope digest is checked.

Stream

Chunked and checked

saar_native stream-compress --profile fast \
  --chunk-size 4194304 --threads 8 < input > output.sast
saar_native stream-decompress < output.sast > restored

SAST v3 carries ordered chunks and a complete transcript. The decoder checks completeness before declaring success.

Shard worker

Transport-neutral execution

saar shard-worker task.saar -o result.saar

A worker runs one bounded shard task. Assembly is independent of completion order and is checked before the stream is accepted.

Encrypted wrapper

Experimental local container

SAAR_PASSPHRASE='…' saar encrypt input.saar -o input.encrypted.saar
SAAR_PASSPHRASE='…' saar decrypt input.encrypted.saar -o restored.saar

This is an experimental local wrapper, not a replacement for QNSI key management. It is not an independent security review.

Limits and profiles

Bounded by design.

Limits are part of the contract. A candidate is accepted only after it decodes back to the source bytes; incompressible input falls back to stored bytes.

Object size

16 MiB

Larger inputs are split into independent chunks.

Stream chunk

16 MiB

Per-chunk decoded output is bounded.

Workers

64

Native stream batches can use multiple workers.

Large delivery

5 TiB

Resumable, verified part streams with checkpoint continuation; the hosted workspace admits files up to this size. An implemented admission limit, not a throughput claim.

Fast profile, scoped

2674.7 MB/s at 8 threads on the local reference (21 October 2026, one machine). This is not a universal throughput claim and not a customer baseline.

Read the scoped throughput notes