attenu-io/attenu-guard

attenu-guard demo: one delegation, a legitimate read allowed, poisoned export and email refused, subtree revoked, audit hash chain verified

cd <host-path> && git log -1 --format=%H 2>/dev/null; ls -la; cat README.md 2>/dev/null | head -200
echo "CDP=$CDP_URL $<env-var>"; which python3 node npm pip3 uv 2>&1; python3 --version
cd <host-path> && sed -n 200,400p README.md | grep -n -i -E "^#|pip|python3|attenu-guard " | head -80; python3 -m pip --version 2>&1 | head -1
cd /tmp && (sudo apt-get update -qq && sudo DEBIAN_FRONTEND=noninteractive apt-get install -y -qq python3-pip python3-venv) >/tmp/apt.log 2>&1; echo apt=$?; python3 -m venv /tmp/ag-venv && /tmp/ag-venv/bin/pip install -q attenu-guard 2>&1 | tail -5; echo pip=$?; /tmp/ag-venv/bin/attenu-guard --help 2>&1 | head -30
cd <host-path> && /tmp/ag-venv/bin/attenu-guard demo; echo rc=$?
cd <host-path> && mkdir -p .coldpass && ls -la .coldpass && cat > .coldpass/probe.json <<'EOF'
{"kind":"cli","argv":["/tmp/ag-venv/bin/attenu-guard","demo"],"cwd":"<host-path>","expected_text":"hash-chain verifies = True"}
EOF
cat > .coldpass/report.json <<'EOF'
{"outcome":"working","operation":"attenu-guard demo: one delegation, a legitimate read allowed, poisoned export and email refused, subtree revoked, audit hash chain verified","operation_scope":"Python library + CLI only; no browser, API key, or network needed for the demo. Checked the README quickstart command only, not the test suites.","steps":["Read README.md","apt-get install python3-pip python3-venv (guest had python3 only)","python3 -m venv /tmp/ag-venv","/tmp/ag-venv/bin/pip install attenu-guard","/tmp/ag-venv/bin/attenu-guard --help","/tmp/ag-venv/bin/attenu-guard demo (rc=0, hash-chain verifies = True)"],"deviations":["README shows `pip install attenu-guard` with no venv; guest lacked pip and venv, so installed python3-pip and python3-venv via apt and used /tmp/ag-venv with absolute paths for the probe."],"stuck_step":null,"main_blocker":null,"suggested_fix":null}
EOF
<env-var>=<host-path> python3 -I <host-path> --validate; echo rc=$?