{
  "checker": {
    "details": {
      "argv": [
        "<host-path>",
        "scan",
        "."
      ],
      "kind": "cli",
      "needs_browser": false,
      "needs_credentials": false,
      "returncode": 0,
      "scope": "product operation",
      "stderr": "",
      "stdout": "\u256d\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 PolicyAware Local Code Scan \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u256e\n\u2502     Critical           327            313       1.02s            6%          \u2502\n\u2502   Overall risk    Files scanned    Findings   Scan time    Policy coverage   \u2502\n\u2570\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 AI governance scanner \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u256f\n\u256d\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u256e\n\u2502                                   Critical                                   \u2502\n\u2502                                                                              \u2502\n\u2502   Status     Finding                                                         \u2502\n\u2502  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500  \u2502\n\u2502   CRITICAL   docs/capabilities/ready-to-use-yaml.md:448 - Possible secret    \u2502\n\u2502              or API credential found                                         \u2502\n\u2502   CRITICAL   docs/cli-usability.md:199 - Possible secret or API credential   \u2502\n[excerpt truncated]",
      "working": true
    },
    "status": "PASS"
  },
  "deviations": [
    "README uses 'pip install policyaware'; instead installed from the pinned checkout with 'pip install .' into a venv, to match commit 4854b99.",
    "python3 -m venv failed (ensurepip missing); ran 'apt-get install python3-venv' then recreated the venv."
  ],
  "main_blocker": null,
  "operation": "policyaware scan . (offline AI governance linter, README 'Try In 30 Seconds' section)",
  "operation_scope": "Local offline scan of the checkout; the scan's HTML report is written to the workspace and removed before probe. Browser/CDP and API keys not needed.",
  "outcome": "working",
  "steps": [
    "pip install from checkout into <host-path> (python3 -m venv needed python3-venv via apt; installed)",
    "policyaware --version -> 0.4.12",
    "policyaware doctor --json -> ok",
    "policyaware quickstart --no-write -> dry run pass",
    "policyaware scan . -> rc 0, report generated"
  ],
  "stuck_step": null,
  "suggested_fix": null
}