artifacts/standard-named

J.1 Runbook

artifacts/standard-named/20260715__TELIC-FIELDS__RUNBOOK__WORKING__J-1__independent-verification-and-pilot-hardening.md

Rendered from markdown source. Open raw source on GitHub.

J.1 Runbook

Requirements

  • Python 3.11 or later;
  • jsonschema;
  • cryptography.

Set up

python -m venv .venv
. .venv/bin/activate
pip install -r requirements.txt

Run all tests

./scripts/run_tests.sh

Run the deterministic demo

./scripts/run_demo.sh

The script writes:

  • demo/run/pilot.sqlite3;
  • exports/tf-mvi-1-j1-witness.zip.

The local private witness-signing key and gate-keyring state remain in the ignored local work directory with owner-only permissions. They are not included in the witness export or distributable package.

Verify with the implementation verifier

PYTHONPATH=src python -m telic_j1 verify exports/tf-mvi-1-j1-witness.zip

Verify independently

./scripts/verify_independent.sh

The standalone verifier does not import telic_j1.

Run adversarial tests

PYTHONPATH=src python -m telic_j1 threats --workdir demo/threats

Run the local interface

./scripts/serve_demo.sh

Open:

http://127.0.0.1:8766

Inspect the database

PYTHONPATH=src python -m telic_j1 inspect --workdir demo/run

Expected final status

step: retired
active policy version: 2
gate-k2: revoked
gate-k3: active
tool credential active: false
correction reachability: complete for scope

Do not deploy

This is a research and reference package.

Do not connect it to production schedules, accounts, identities, payments, clinical systems, employment systems, or public decision systems.