STEP 0
What is already on this machine
| Kind | Host | Scope | Name | Path | SHA-256 | Modified |
|---|
No AI components found in the known locations.
STEPS 2 AND 3
Read it raw, then scan it
Nothing scanned yet.
Rendered (what you see) vs raw (what the model reads)
#RenderedRaw
STEP 1
Who made it? Check before you install
Nothing checked yet. Fetching never runs anything, and the install command is only ever printed.
Scan of the quarantined copy
STEP 4
First run in a box
No network, read-only root, no capabilities, fake secrets only, local model.
What the agent did, live
Verdict
STEP 5
Did anything change since you approved it?
Compares every component with unpick.lock.json; changed text files show as a diff.
WHEN IT GOT THROUGH
Contain, rotate, find out what happened
Secret values are never shown: names and locations only. If a stealer ran, rotation is not optional.
1. Contain
2. Rotate
4. Changed on disk
5. Watch outbound connections
6. Report the component
3. What the agents did
WITNESSES
Scanners and judges on this machine
Scanner backends (all optional)
| Name | Installed | Version | Tested | Maintainer | Licence | Network as invoked |
|---|
Judges (one witness, never the verdict)
| Id | Where | Found by | Consent | Usable | Adversarial corpus |
|---|
Agreement in the last scan
Run a scan with more than one source to see where they agree.