Fast Path Tutorial (5–10 minutes)

What you’re proving

  • Config validation passes with explicit check count.

  • Transport layer evidence is captured in an environment-aware way:

    • socket-based mTLS/domain tests run where supported, or

    • deterministic transport unit subset runs as documented fallback.

  • Quota drops occur without disconnect semantics.

  • Disk ceiling checks and pre-eviction path both pass.

Prereqs

  • Go toolchain compatible with edge/go.mod

  • From repo root

Steps

cd <repo-root>
make edge-demo-script

Expected outputs (real):

[1/4] validate pass
VALIDATION PASS (checks=32, assurance=full (cgroup v2 ok), local_root=/tmp/edge-segments, disk_ceiling=10737418240, per_peer_quota=104857600)
...
transport socket tests unavailable in this environment; running deterministic transport unit subset
--- PASS: TestCertIdentityFromCert_URIRules
--- PASS: TestWireOfferRoundTrip
--- PASS: TestWireSegmentRoundTrip
...
--- PASS: TestFI_C3_03_AuthorizedPeerFlood
...
--- PASS: TestCeiling_ErrCeilingExceeded_PostWriteCheck
--- PASS: TestCeiling_PreEviction_TriggeredAtThreshold

How to verify

  • Confirm script exits 0.

  • Confirm all four phases are printed and each phase ends in PASS (allowing the documented transport fallback path).

  • Confirm at least one edge.quota.exceeded log appears in phase [3/4].

Common failure modes + debugging

  • go: errors parsing go.mod: use the Go version required by your local setup for this repo.

  • Missing VALIDATION PASS: run GOWORK=off go run ./edge/cmd/edged validate --config ./edge/edge.example.toml directly.

  • Transport test failures: run GOWORK=off go test -v ./edge/transport -run 'TestTCPTLS_HappyPath|TestTCPTLS_WrongDomain_Rejected'.

Do Not Do / Non-goals

  • Do not interpret this as orchestration coverage; it validates local deterministic relay invariants only.

  • Do not infer control-plane push authority from this tutorial.

Evidence

  • edge/ci/tests/demo_script.sh

  • docs/_generated/test-outputs/demo-output.txt

  • Makefile target edge-demo-script