Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
13 changes: 13 additions & 0 deletions docs/REVIEWER_GUIDE.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,19 @@ IAMScope currently has a local synthetic path-overcounting teaching demo and one

This guide is a reviewer-facing map for the current public demo/evidence chain. It does not add evidence, broaden supported claims, or change the safe local workflow.

## Run The Local Demo Review

From the repository root:

```sh
python scripts/run_public_demo_review.py --out /tmp/iamscope-public-demo-review
```

This local-only command generates `summary.md`, `manifest.json`, and
`path-overcounting-uncertainty-groups.json` under the output directory. It does
not run live AWS. See
[`docs/case-studies/public-demo-review-runbook.md`](case-studies/public-demo-review-runbook.md).

## What To Review First

Start with the public case-study narrative, then inspect the binding checkpoints and local fixtures only if you want deeper verification. The intended review is about claim boundaries, evidence framing, and whether the docs make the safe local path clear.
Expand Down
11 changes: 11 additions & 0 deletions docs/START_HERE.md
Original file line number Diff line number Diff line change
Expand Up @@ -107,6 +107,17 @@ Local demo: [Path Overcounting and Shared Uncertainty](case-studies/path-overcou

Case study: [PassRole-to-Lambda Controlled Live Validation](case-studies/passrole-lambda-controlled-live-validation.md) summarizes the two-sided controlled live validation pair: one selected allowed `CreateFunction` match and one missing-PassRole `access_denied` no-selected-finding match.

Run the local demo review:

```sh
python scripts/run_public_demo_review.py --out /tmp/iamscope-public-demo-review
```

This local-only command generates `summary.md`, `manifest.json`, and
`path-overcounting-uncertainty-groups.json` under the output directory. It does
not run live AWS. See the
[public demo review runbook](case-studies/public-demo-review-runbook.md).

### Live AWS Collection

Live `iamscope collect` is not the default path. It is advanced/authorized only.
Expand Down