Add VSA verification demo with terminal recording#535
Open
TomHennen wants to merge 3 commits into
Open
Conversation
TomHennen
had a problem deploying
to
integration-test
June 20, 2026 19:57 — with 
GitHub Actions
Failure
GitHub Actions
Failure
TomHennen
commented
Jun 20, 2026
Owner
Author
There was a problem hiding this comment.
Where did this come from? Did we generate the output for real or was it all fake?
Owner
Author
There was a problem hiding this comment.
Update: it's fake LoL. Let's collect the real output and then re-record.
TomHennen
force-pushed
the
claude/quirky-hamilton-5bcm3i
branch
from
June 20, 2026 20:16
36d491f to
6b34089
Compare
TomHennen
temporarily deployed
to
integration-test
June 20, 2026 20:16 — with
GitHub Actions
Inactive
GitHub Actions
Inactive
Demonstrates the downstream consumer flow: verifying a release archive's signed wrangle VSA with `ampel verify` and the jsonl collector. The command, policy locator, collector, and checks mirror the build-type READMEs; the illustrative output is produced by assets/demo/vsa_verify_demo.sh, shimmed in as `ampel` during rendering. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]> Claude-Session: https://claude.ai/code/session_01DmabVc8iXNX8JBH3FGeYkH
Group the .tape and its staged-output helper under docs/demos/ with a README documenting the render requirements (vhs/ttyd/ffmpeg, non-root). The rendered GIF stays in assets/images/ with the other doc screenshots. Embed it in the "Recommended: ampel verify" section of docs/verifying_artifacts.md, next to the file-artifact command it demonstrates. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]> Claude-Session: https://claude.ai/code/session_01DmabVc8iXNX8JBH3FGeYkH
Add a Contributing-process bullet so the VSA verification demo (and future demos) stay in sync when the flow they show changes. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]> Claude-Session: https://claude.ai/code/session_01DmabVc8iXNX8JBH3FGeYkH
TomHennen
force-pushed
the
claude/quirky-hamilton-5bcm3i
branch
from
June 20, 2026 20:54
6b34089 to
6a442f6
Compare
TomHennen
temporarily deployed
to
integration-test
June 20, 2026 20:54 — with
GitHub Actions
Inactive
GitHub Actions
Inactive
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What does this PR do?
Adds a terminal-recording demo showing downstream VSA verification using
ampel verifywith a wrangle policy and JSONL collector. The demo includes:docs/demos/vsa_verification.tape— VHS script that types a realisticampel verifycommand with policy locator, collector, and context argumentsdocs/demos/vsa_verify_demo.sh— Staged output script (symlinked asampelduring rendering) that illustrates verification steps and a PASSED verdictdocs/demos/README.md— Maintainer guide explaining the demo sources, rendering process, and VHS/ffmpeg requirementsassets/images/vsa_verification.gif) intodocs/verifying_artifacts.mdto illustrate the consumer workflowCLAUDE.mdto document the demos directory as a maintainer aidThe command, policy, collector, and checks mirror the build-type READMEs; the output is illustrative (not a live verifier) to keep rendering deterministic and fast.
Checklist
make testpasses locally — no new code to test; demos are rendered artifacts reviewed before commitcontinue-on-errorwithout justification@mainrefs inuses:lines — no workflow changesSPEC.mdexists/updated — not applicable; demos are maintainer tooling, not adopter-facinghttps://claude.ai/code/session_01DmabVc8iXNX8JBH3FGeYkH