SIO24 · One-Command Bootstrap

Bootstrap the observer.
Never bootstrap authority.

Turn the read-only Shadow Setup Manifest into a customer-controlled bootstrap artifact. The generated package verifies its own invariants before creating a local observation boundary. It contains no secret, no write scope, no execution credential, and no path for the website to control your environment.

01 / Runtime target

Choose where the read-only boundary lives.

Local replay runtimeNo customer-system connection. Creates a local inbox and evidence directory.Customer Linux runtimePrepares a customer-owned host boundary. Local transport configuration is supplied later.Customer Docker runtimePrepares a read-only container runtime manifest without embedding credentials.Customer Kubernetes runtimePrepares namespace-local configuration with zero write scope and no secret values.

02 / Evidence custody

Keep the resulting evidence under customer control.

EVIDENCE DESTINATIONINSTALLATION ROOTI understand this package establishes observation only.It grants no authority, issues no executable permit, releases no credential, and cannot write to a consequential customer system.

03 / One command

Generate a self-verifying customer-local bootstrap.

AFTER DOWNLOADComplete SIO23 Shadow Mode Quickstart first.

Continue to Integration Studio Back to Shadow Setup

Verify

The script validates the embedded shadow manifest and refuses to apply if write scopes, executable permits, credentials, or forbidden consequence effects appear.

Prepare

Customer-local runtime, configuration, inbox, evidence, and teardown directories are created with restrictive defaults.

Observe

Local replay can begin immediately. Connected transports remain customer-supplied and read-only; the website never receives their secrets.

Teardown

The package records a deterministic removal path. Teardown removes the shadow runtime boundary; it does not claim rollback of any consequential action because SIO24 executes none.

Bootstrap applied ≠ workflow authorized.write_scopes=0 · permit=PROHIBITED · credential=PROHIBITED · execution=PROHIBITED · proof=NOT_CREATED