Recertification

The recertification group manages recertification cycles and audit reviews from the command line.

Commands

qarion recertification list SPACE

List all recertification cycles in a space.

Argument	Description
SPACE	Space slug

qarion recertification list marketing-analytics

Output columns: ID, Name, Type, Status, Due Date, Audits, Reviewed

---

qarion recertification get SPACE CYCLE_ID

Get cycle details including audit items.

Argument	Description
SPACE	Space slug
CYCLE_ID	Cycle UUID

qarion recertification get marketing-analytics 550e8400-e29b-41d4-a716-446655440000

Output fields: ID, Name, Description, Type, Status, Due Date, Audits, Reviewed

If the cycle has audit items, they are shown in a sub-table.

---

qarion recertification create SPACE

Create a new recertification cycle.

Argument / Option	Type	Default	Description
SPACE	argument	required	Target space
--name	option	required	Cycle name
--due-date	option	required	Due date (ISO-8601)
--type	option	product	product or access
--description	option	—	Optional description

qarion recertification create marketing-analytics \
    --name "Q1 2026 PII Review" \
    --due-date "2026-03-31T23:59:59Z" \
    --type product \
    --description "Quarterly review of PII-tagged products."

---

qarion recertification populate SPACE CYCLE_ID

Auto-populate audit items for a cycle. Idempotent — re-running skips already-included resources.

Argument	Description
SPACE	Space slug
CYCLE_ID	Cycle UUID

qarion recertification populate marketing-analytics 550e8400-e29b-41d4-a716-446655440000
# Output: Created 12 audit item(s).

---

qarion recertification complete SPACE CYCLE_ID

Mark a cycle as completed (read-only).

Argument	Description
SPACE	Space slug
CYCLE_ID	Cycle UUID

qarion recertification complete marketing-analytics 550e8400-e29b-41d4-a716-446655440000

---

qarion recertification cancel SPACE CYCLE_ID

Cancel a recertification cycle.

Argument	Description
SPACE	Space slug
CYCLE_ID	Cycle UUID

qarion recertification cancel marketing-analytics 550e8400-e29b-41d4-a716-446655440000

---

qarion recertification review AUDIT_ID

Approve or reject a single audit item.

Argument / Option	Type	Default	Description
AUDIT_ID	argument	required	Audit UUID
--status	option	required	approved or rejected
--comments	option	—	Reviewer notes

# Approve
qarion recertification review 9b1deb4d-3b7d-4bad-9bdd-2b0d7b3dcb6d \
    --status approved

# Reject with reason
qarion recertification review 9b1deb4d-3b7d-4bad-9bdd-2b0d7b3dcb6d \
    --status rejected \
    --comments "Access no longer needed"

---

Example: Scripted Review

#!/usr/bin/env bash
SPACE="marketing-analytics"

# Create and populate a cycle
CYCLE_ID=$(qarion --json recertification create "$SPACE" \
    --name "Q1 Review" \
    --due-date "2026-03-31T23:59:59Z" | jq -r '.id')

qarion recertification populate "$SPACE" "$CYCLE_ID"

# List and review
qarion recertification get "$SPACE" "$CYCLE_ID"

# Complete when done
qarion recertification complete "$SPACE" "$CYCLE_ID"