`autonomy demo policy`¶

Demo in-process policy governance (no Docker or control plane required)

Synopsis¶

Starts an in-process policy-gated runtime using the embedded demo policy,
then executes three tool calls to demonstrate allow/deny governance:

  tool.echo     → ALLOW  (explicitly permitted by demo policy)
  tool.http_get → ALLOW  (explicitly permitted by demo policy)
  tool.shell    → DENY   (not in allow-list; fail-closed default)

No Docker, external registry, or control-plane connection is needed.

Usage¶

autonomy demo policy

Options inherited from parent commands¶

      --require-signed-manifest   Refuse to start if the SHA256SUMS release manifest or its cosign signature is missing/invalid (Tier 2 binary-integrity check; default: build-time compile-in via -ldflags -X, build-hardened artifacts=true, all others=false)

See also¶

autonomy demo — Run self-contained demos that require no Docker or control plane