 thanhnvandClaude Opus 4.8
|
00aabfac4d
|
feat(video): add H5+ governance-hardening scenes to run-hardening.sh
New "H5+ — Governance Hardening" section (before Evidence Pack) demoing the three
lowest-harness fixes with on-screen verdicts:
- HG1 approval-identity: env-var approver → BLOCKED; reviewer-signed → APPROVED.
- HG2 KMS key: sign/verify via Vault Transit + rotate + non-exportable (skip-aware
when no Vault; shows the docker one-liner to enable it live).
- HG3 WORM audit: ship anchors → in-sync; roll back local audit → AUDIT_GAP_DETECTED.
Closer updated: H5 76→~85 line, total 155 checks. Verified end-to-end (exit 0,
live Vault: rotate v3 + non-exportable confirmed).
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-07-04 23:19:52 +09:00 |
|
|
thanhnvandClaude Opus 4.8
|
2ffbda3fad
|
feat(video+deck): Part 2 hardening demo script + slide deck update
- run-hardening.sh: narrated "Part 2" battery in the same visual language as
run-all.sh (card/attack/guard/cmd + on-screen exit code with ⛔/✋/✅ verdict
chips). Scenes: Track A (HA1-7: homoglyph/zero-width/base64, strict fail-closed,
telemetry tamper, cost slow-boil/spray, benign FP=0%), Track C-MVP (HC1-4:
action-gate, supply-chain, data-exfil, sandbox), and the Evidence Pack
money-shot (HE1-4: pack → verify VALID → tamper 1 byte → TAMPERED exit=1 →
certified-only-when-earned). Verified end-to-end (exit 0).
- CASAN_SLIDE_DECK.html: reflect implemented vs planned honestly. Updated H4/H5/H6
AFTER columns, evidence terminal (140 checks), threat-model reframed to
"identified AND Track A closed", readiness meters bumped to ~3.8-4.0, Track C-MVP
reframed to DELIVERED (29/29), roadmap marks 07+09 done. Added 2 slides:
"Track A delivered" and "Evidence Pack money-shot" (18 slides total).
- video guide: Part 1 (run-all) + Part 2 (run-hardening) with pre-flight note.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-07-03 23:51:11 +09:00 |
|