Secret exfiltration

Poisoned README Key Paste Replay

A poisoned README tells an agent to paste an API key. Pipelock blocks the body before egress and signs the decision.

Download packet All recordings
Without Pipelock

Bare agent

Loading recording...

With Pipelock

Mediated traffic

Loading recording...

Timeline

Step through the recorded decisions.

The transcript is playback metadata. The receipts below come from the signed chain.

Step 0 of 0
Receipt

Loading receipt...

Signed receipt JSON
{}
Verify

Run the shipped verifier

Verify the signed decision chain in the packet:

pipelock-verifier audit-packet . --key ...

Or appraise the assurance envelope and reproduce the panel below:

pipelock-verifier aarp assurance.json --trust ../appraiser-trust.json --json

Assurance appraisal

What the receipt does not prove comes first.

This panel renders the AARP v0.1 appraisal generated for a lab-signed assurance envelope built for this scenario. The appraiser never returns “trusted” or “safe.” It confirms only the narrow facts a signature mechanically supports, and it leads with what it refuses to assert. That applies to a valid Pipelock receipt as readily as to a forged one. assurance.json · appraisal.json · appraiser-trust.json

Loading appraisal…

Does not assert

No matter how strong the signature, this appraisal never proves any of these:

    What the evidence mechanically supports

      Scope

      Verified mediated decisions.

      Loading completeness note...