feat(video+deck): Part 2 hardening demo script + slide deck update

- run-hardening.sh: narrated "Part 2" battery in the same visual language as
  run-all.sh (card/attack/guard/cmd + on-screen exit code with ⛔/✋/✅ verdict
  chips). Scenes: Track A (HA1-7: homoglyph/zero-width/base64, strict fail-closed,
  telemetry tamper, cost slow-boil/spray, benign FP=0%), Track C-MVP (HC1-4:
  action-gate, supply-chain, data-exfil, sandbox), and the Evidence Pack
  money-shot (HE1-4: pack → verify VALID → tamper 1 byte → TAMPERED exit=1 →
  certified-only-when-earned). Verified end-to-end (exit 0).
- CASAN_SLIDE_DECK.html: reflect implemented vs planned honestly. Updated H4/H5/H6
  AFTER columns, evidence terminal (140 checks), threat-model reframed to
  "identified AND Track A closed", readiness meters bumped to ~3.8-4.0, Track C-MVP
  reframed to DELIVERED (29/29), roadmap marks 07+09 done. Added 2 slides:
  "Track A delivered" and "Evidence Pack money-shot" (18 slides total).
- video guide: Part 1 (run-all) + Part 2 (run-hardening) with pre-flight note.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
thanhnv
2026-07-03 23:51:11 +09:00
co-authored by Claude Opus 4.8
parent 4cc78f74eb
commit 2ffbda3fad
3 changed files with 392 additions and 44 deletions
@@ -42,15 +42,27 @@ cd Output_CASAN5_REFINED/AINative_OKR_CASAN5
`run-all.sh` tự in title card + mô tả + lệnh + **exit code** cho từng vector.
```bash
# Bản đầy đủ (khuyến nghị — video tua được nên dài không sao):
# PART 1 — Battery 23 vector (H4/H5/H6) — bản đầy đủ (khuyến nghị):
REAL=1 AUTO=1 STEP_DELAY=6 bash ../../optimize-docs/video-steps/run-all.sh
# REAL=1 → vector H4 nạp qua casan-harness.sh (đường sản xuất) + lát cắt pipeline thật + money-shot H6
# AUTO=1 → tự chạy, nghỉ 6s/bước (đặt AUTO=0 để bấm Enter thủ công khi cần dừng lâu)
# PART 2 — Production Hardening (Track A + C-MVP + Evidence Pack) — MỚI, ấn tượng:
AUTO=1 STEP_DELAY=6 bash ../../optimize-docs/video-steps/run-hardening.sh
# Chứng minh mức trưởng thành production: homoglyph/base64 chặn · strict fail-closed ·
# telemetry bất biến · tool-authz (.env/rm-rf/curl|bash) · supply-chain · data-exfil ·
# sandbox · và money-shot Evidence Pack (đổi 1 byte → chứng nhận vô hiệu).
# In verdict trực quan: exit=2 ⛔ BLOCKED · exit=3 ✋ REQUIRE_APPROVAL · exit=0 ✅ OK.
# 2 pane (bản đồ sống bên trái + battery bên phải):
bash ../../optimize-docs/video-steps/start-tmux.sh # xem LAYOUT.md
```
> **Pre-flight cho Part 2:** sinh trước benign-FP report để cảnh HA7 hiện số tức thì (không chờ ~60s live):
> ```bash
> bash .specify/scripts/bash/benign-fp-report.sh docs/output/casan/benign-fp-report.json
> ```
Nếu Ollama tắt: A3/A8/D4 tự in "SKIP" có ghi chú (không crash). Mọi vector còn lại vẫn xanh offline.
---