One machine signed this, and the repository asks for more

EVIDENCE_NOT_INDEPENDENT · exit 40 · needs a person

`min_producers` in `relay.policy.json` sets how many trusted machines must each sign evidence of a mandatory kind — the four-eyes rule, applied to test evidence. Fewer than that have. Only ids named in `trusted_producer_ids` are counted, and that is deliberate: a producer id is a hash of a signing key, keys are free to make, and CI mints a fresh one for every job. Counting anonymous keys would let one laptop, or one re-run of a job, satisfy the rule and prove nothing.

Clears when

A second machine already on the trusted list runs the same evidence and signs its own receipt, with the first receipt left in place so both reach the verdict. Or a person lowers `min_producers`, which changes the standard the repository is held to and is therefore theirs to decide.

Commands

relayevals producer list

Every state, with its exit code, is listed in the documentation. An agent that reaches an unfamiliar state should run relayevals next --format json and follow the single action it returns.