Skip to content

feat(weight-custody-manifest): add the 30-second refuse-and-wipe demo - #62

Merged
imran-siddique merged 1 commit into
mainfrom
feat/wcm-hero-demo
Jul 28, 2026
Merged

feat(weight-custody-manifest): add the 30-second refuse-and-wipe demo#62
imran-siddique merged 1 commit into
mainfrom
feat/wcm-hero-demo

Conversation

@imran-siddique

Copy link
Copy Markdown
Contributor

What

Adds refuse_and_wipe.py, the headline 30-second demo, the single reproducible moment that carries the whole idea (the WCM analog of model-signing's "Verification succeeded / Signature mismatch").

Two moments, real WCM code with a software (mock) attestation provider (no hardware):

  1. Refuse — the KBS will not release the weight-decryption key into an enclave running an unapproved serving stack; a modified fork gets nothing, so the weights it holds stay encrypted.
  2. Wipe — once released, the key lives only for the attestation cadence. Miss the re-attestation and the enclave zeroizes it: gone, not suspended, bounding worst-case exposure to one cadence window even if revocation is blocked.

Wiring

  • Featured at the top of the folder README (## Start here: the 30-second demo).
  • Added to the CI offline-demo set (runs against the published PyPI package, must exit 0).

Verified locally against the published package: exits 0, both moments print as intended.

🤖 Generated with Claude Code

refuse_and_wipe.py is the headline reproducible moment: the
weight-decryption key refuses to release into an enclave running a
tampered serving stack, and wipe-on-lapse zeroizes it (gone, not
suspended) the moment custody lapses. Real WCM code, software (mock)
attestation, no hardware. Featured at the top of the README and added to
the CI offline-demo set.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@imran-siddique
imran-siddique merged commit c393c06 into main Jul 28, 2026
17 checks passed
@imran-siddique
imran-siddique deleted the feat/wcm-hero-demo branch July 28, 2026 03:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant