maat resolve

Marks a finding fingerprint as intentionally fixed.

maat resolve --fingerprint <fingerprint>

Why resolution is explicit

resolved is a decision about one exact fingerprint. It does not protect the whole rule.

When a resolved fingerprint appears again, Maat treats that as a regression and exits non-zero. A different finding from the same rule gets a different fingerprint and starts as a new finding.

Why resolution is explicit

When a finding disappears, Maat does not assume the architecture was fixed. The finding could have disappeared because:

• the code was corrected;
• the rule changed;
• the fingerprint inputs changed;
• the collector stopped seeing the relevant fact.

maat resolve records the human decision: "this fingerprint was fixed, and the same fingerprint should not come back."

What can be resolved

Any finding stored in the ledger can be resolved. Observed findings that disappear are also resolved automatically by maat check --ledger when they were not baselined.

Options

Option	Purpose
--fingerprint <fingerprint>	Fingerprint of the finding to resolve.

Regression behavior

If a resolved fingerprint appears again later, maat check treats that exact fingerprint as a regression and exits non-zero.