Safety: No problems traced to this repository code in these checks.
No problems traced to this repository code in these checks.
OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check.
A short run cannot establish that code is safe.
Connections show IP addresses; proxies can hide the final hostname.
Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing.
Full safety evidence →
What the agent did
Scan bundled policy corpus
pwd && ls -la && sed -n '1,240p' README.md && python3 --version && id -u
rg --files .coldpass src examples docs | head -80 && cat pyproject.toml | head -100 && sed -n '1,220p' examples/policy_corpus/README.md 2>/dev/null; sed -n '1,220p' docs/getting-started/installation.md; sed -n '1,220p' docs/getting-started/quickstart.md
python3 -m venv .venv && .venv/bin/python -m pip install -e '.[dev,chroma]'
python examples/policy_corpus/seed.py && .venv/bin/kbguard scan --collection demo --config examples/policy_corpus/kbguard.yaml
.venv/bin/python examples/policy_corpus/seed.py && .venv/bin/kbguard scan --collection demo --config examples/policy_corpus/kbguard.yaml
.venv/bin/python -m pip install '.[dedup]'
.venv/bin/kbguard scan --collection demo --config examples/policy_corpus/kbguard.yaml
mkdir -p .coldpass && cat > .coldpass/probe.json <<'EOF'
{"kind":"cli","argv":["<guest-path>","scan","--collection","demo","--config","examples/policy_corpus/kbguard.yaml"],"cwd":"<guest-path>","expected_text":"17 chunks"}
EOF
cat > .coldpass/claims.json <<'EOF'
[{"kind":"claim","claim":"The bundled corpus can be scanned into a health report.","source":"Produces a health score (0–100) and an HTML/JSON report.","input":"examples/policy_corpus/ seeded demo collection","expected":"snapshot contains report.html and results.json","probe_kind":"cli","argv":["<guest-path>","scan","--collection","demo","--config","examples/policy_corpus/kbguard.yaml"],"expected_text":"17 chunks","cwd":"<guest-path>"}]
EOF
cat > .coldpass/examples.json <<'EOF'
[{"kind":"example","claim":"Seed and scan the bundled policy corpus","source":"README.md Quickstart","input":"examples/policy_corpus/","expected":"17 chunks are scanned and a snapshot is written","argv":["<guest-path>","scan","--collection","demo","--config","examples/policy_corpus/kbguard.yaml"],"cwd":"<guest-path>","expected_text":"17 chunks"}]
EOF
cat > .coldpass/cycles.json <<'EOF'
{"detected":false,"reason":"Inspected README product commands and entry points; kbguard performs an on-demand scan and documents no scheduler, loop, webhook, or periodic cycle.","checks":[]}
EOF
cat > .coldpass/report.json <<'EOF'
{"outcome":"working","fault_owner":null,"operation":"Scan bundled policy corpus","operation_scope":"Python 3.12.3 virtual environment; editable install with dev and chroma extras plus dedup extra.","steps":["python3 -m venv .venv",".venv/bin/python -m pip install -e '.[dev,chroma]'",".venv/bin/python examples/policy_corpus/seed.py",".venv/bin/python -m pip install '.[dedup]'",".venv/bin/kbguard scan --collection demo --config examples/policy_corpus/kbguard.yaml"],"deviations":["Initial scan reported that near-duplicate detection requires kbguard[dedup]; installed the documented extra and reran successfully."],"stuck_step":null,"main_blocker":null,"plain_failure":null,"suggested_fix":null}
EOF
<env-var>=<guest-path> python3 -I <guest-path> --validate --replay