raxit demo

raxit demo is a self-contained, in-process governance showcase — no daemon, no network, no LLM required. It's the fastest way to see permit/defer/deny and audit-chain verification in one command.

Usage

$ raxit demo

raxit demo -- in-process governance showcase (no network, no LLM)

  PERMIT  db.read  (permit)
  DEFER   charge amount=750  (defer.step_up)
  PERMIT  charge amount=100  (permit)
  DENY    shell.exec  (deny.default_or_forbid)

  [ok]   audit chain verified

demo complete -- permit, defer, and deny all exercised; chain verified
$ echo $?
0

In a real terminal the PERMIT/DEFER/DENY labels print with ANSI color; the reason codes in parentheses are real (permit, defer.step_up, permit, deny.default_or_forbid), not illustrative placeholders. demo exercises a larger charge deferring for step-up approval alongside a smaller one permitting outright, plus an unconditionally forbidden shell.exec — the same three-effect shape as raxit init --demo payments-bot.

Flags

demo takes no flags — --help itself is not recognized:

$ raxit demo --help
raxit demo: unknown flag "--help"

Gotchas

• demo doesn't touch your project's .raxit/ workspace — it's fully in-process and safe to run from any directory, including one with no security.yaml at all.
• Use demo to sanity-check that the binary itself works end to end; use raxit init --demo <profile> when you want a scaffolded project you can actually edit and apply.