pkpk6top/3dsm

End-to-end README demo: examples/demo.py (keygen, pack cube to .3dsm, verify manifest and fingerprint, mutate and re-verify). Output: manifest_valid True, trust out_of_band, similarity 1.0; mutated similarity 0.5889 (inconclusive).

cd <host-path> && ls -la && cat README.md 2>/dev/null | head -200
ls <host-path> 2>/dev/null; echo "CDP=$CDP_URL $<env-var>"; which node npm python3 pip3 uv 2>&1; cat /etc/os-release | head -2
cd <host-path> && cat .python-version && ls .github/workflows && (curl -LsSf https://astral.sh/uv/install.sh | sh) 2>&1 | tail -3; ls -la ~/.local/bin/uv 2>&1; export PATH=$HOME/.local/bin:$PATH; uv --version
cd <host-path> && export PATH=$HOME/.local/bin:$PATH NODE_USE_ENV_PROXY=1 && uv sync 2>&1 | tail -15; echo "rc=$?"; ls -la .venv/bin/dsm 2>&1
cd <host-path> && head -40 examples/demo.py; ls .coldpass 2>&1
cd <host-path> && export PATH=$HOME/.local/bin:$PATH && uv run python examples/demo.py 2>&1 | tail -30; echo "rc=${PIPESTATUS[0]}"; ls examples/out 2>&1
cd <host-path> && mkdir -p .coldpass && cat > .coldpass/probe.json <<'EOF'
{"kind":"cli","argv":["<host-path>"}}
EOF
cat > .coldpass/report.json <<'EOF'
{"outcome":"working",
"operation":"End-to-end README demo: examples/demo.py (keygen, pack cube to .3dsm, verify manifest and fingerprint, mutate and re-verify). Output: manifest_valid True, trust out_of_band, similarity 1.0; mutated similarity 0.5889 (inconclusive).",
"operation_scope":"Covers the offline packaging/verification path. Not covered: RFC 3161 timestamp (needs uv sync --extra timestamp), watermark (not implemented), Secure Content. Full pytest suite and dsm licenses not run per smoke-task rules (dsm licenses not run as a probe).",
"steps":["Read README.md (Chinese); noted Python 3.14+ requirement and .python-version=3.14",
"Installed uv 0.13.1 via https://astral.sh/uv/install.sh (guest had only python3 3.12)",
"uv sync (installed cdsm 0.1.0 and 9 deps, rc=0)",
"uv run python examples/demo.py (rc=0, prints verification results; writes examples/out/)"],
"deviations":["README assumes Python 3.14 is available; guest had only system python3 3.12. Resolved by installing uv, which fetched Python 3.14 via .python-version.",
"Installed uv via curl|sh from astral.sh as the prerequisite installer, per task instructions."],
"stuck_step":null,"main_blocker":null,"suggested_fix":null}
EOF
<env-var>=<host-path> python3 -I <host-path> --validate