diff --git a/docs/REVIEWER_GUIDE.md b/docs/REVIEWER_GUIDE.md index 783566e..bc7fa02 100644 --- a/docs/REVIEWER_GUIDE.md +++ b/docs/REVIEWER_GUIDE.md @@ -6,6 +6,19 @@ IAMScope currently has a local synthetic path-overcounting teaching demo and one This guide is a reviewer-facing map for the current public demo/evidence chain. It does not add evidence, broaden supported claims, or change the safe local workflow. +## Run The Local Demo Review + +From the repository root: + +```sh +python scripts/run_public_demo_review.py --out /tmp/iamscope-public-demo-review +``` + +This local-only command generates `summary.md`, `manifest.json`, and +`path-overcounting-uncertainty-groups.json` under the output directory. It does +not run live AWS. See +[`docs/case-studies/public-demo-review-runbook.md`](case-studies/public-demo-review-runbook.md). + ## What To Review First Start with the public case-study narrative, then inspect the binding checkpoints and local fixtures only if you want deeper verification. The intended review is about claim boundaries, evidence framing, and whether the docs make the safe local path clear. diff --git a/docs/START_HERE.md b/docs/START_HERE.md index fdc870a..a67d198 100644 --- a/docs/START_HERE.md +++ b/docs/START_HERE.md @@ -107,6 +107,17 @@ Local demo: [Path Overcounting and Shared Uncertainty](case-studies/path-overcou Case study: [PassRole-to-Lambda Controlled Live Validation](case-studies/passrole-lambda-controlled-live-validation.md) summarizes the two-sided controlled live validation pair: one selected allowed `CreateFunction` match and one missing-PassRole `access_denied` no-selected-finding match. +Run the local demo review: + +```sh +python scripts/run_public_demo_review.py --out /tmp/iamscope-public-demo-review +``` + +This local-only command generates `summary.md`, `manifest.json`, and +`path-overcounting-uncertainty-groups.json` under the output directory. It does +not run live AWS. See the +[public demo review runbook](case-studies/public-demo-review-runbook.md). + ### Live AWS Collection Live `iamscope collect` is not the default path. It is advanced/authorized only.