Every command takes --json for the raw response and --help for its own flags. Sign in once with hanzo auth login; the commands below use that session, and the org they act in is the one it carries.
Command
What it does
hanzo patrol alarm
Takes one activation.
hanzo patrol feed
Watch the live feed
hanzo patrol snapshot
Returns the whole picture in one read: sites, units with their position trails, today's tours and checkpoints, the key register, the recent feed and the open incident.
hanzo patrol tour
Lists patrol rounds with their checkpoints โ the proof-of-presence record.
Records a response by hand, in state received and carrying the site's tier and SLA.
hanzo patrol incident get <name>
Returns one response whole: the incident, every act performed on it, and the SLA clocks those acts settled.
hanzo patrol incident list
Lists responses.
hanzo patrol incident step <name>
Performs one act on an incident: it stamps the act's time, moves the state, appends the act to the trail, and runs what the act sets in motion โ a unit assigned, a site secured, a report filed, a controller told.