# AGENTSCOPE-SIFT — Demo Video Script
# Find Evil! Hackathon 2026 | 5 minutes max

---

## VISUAL IDENTITY
- Colors: Deep black background, terminal green for findings, red for blocks, cyan for chain
- Font: Monospace terminal
- NO cats. NO sovereignty lore. NO crypto branding.
- This is a DFIR tool. Look like one.
- Logo: Radar scope with forensic lens center. A target, not a mascot.

---

## [0:00–0:08] COLD OPEN

*Black screen. Silence.*

Terminal cursor blinks.

```
Memory dump loaded.
2.3 million artifacts.
Unknown attacker.
Active breach.
```

*Pause.*

```
You have 8 minutes.
CrowdStrike's fastest observed breakout: 7 minutes.
```

*Red cursor blinks.*

---

## [0:08–0:18] THE PROBLEM

*Split screen: left = traditional IR, right = AI agent.*

**LEFT — Human analyst:**
```
$ volatility -f dump.raw pslist
$ grep -i suspicious output.txt
$ google "svchost.exe child process"
```
*Clock ticking. 3 minutes gone.*

**RIGHT — Bare AI agent:**
```
Finding: Likely malware present.
Confidence: 92%
```

*Freeze frame. Enormous text appears:*

```
PROVE IT.
```

*Screen shatters.*

---

## [0:18–0:28] AGENTSCOPE ACTIVATES

*Clean terminal. Logo appears top-left: the scope/radar.*

```
AGENTSCOPE-SIFT
Phase-Level AI Agent Telemetry for DFIR
```

*Five phase bars light up left to right:*

```
[ PERCEIVE ] ████████ 
[ REASON   ] ████████ 
[ PLAN     ] ████████ 
[ ACT      ] ████████ 
[ OBSERVE  ] ████████ 
```

*Voice (calm, precise):*
> "Every finding the agent makes must prove which forensic tool produced it.
> If it can't prove it, it doesn't make the finding."

---

## [0:28–0:55] LIVE INVESTIGATION — SCENE 1

*Terminal running. Real output from `node dist/demo.js`*

```
[PERCEIVE]  Evidence: memory.raw (2.1GB)

[REASON]    Artifacts: process list, network connections, injected code

[PLAN]      Sequence: list_processes → netstat → malfind

[ACT]       Calling list_processes(memory.raw)...
```

*Brief pause. Result streams in.*

```
[BOB]       Plasma: clean | Entropy: 4.578 | PASS
[SENTINEL]  Verdict: APPROVED | Trust: 0.89

[SEAL]      Finding → sha256:a125049e540ffcdb...  (WORM #3)

[OBSERVE]   CONFIRMED: svchost.exe (PID 1337) spawned cmd.exe
            Anomalous parent-child. Confidence: 0.91
```

*Arrow points to the seal hash.*
*Text overlay:*
```
Every finding sealed to the exact tool call that produced it.
```

---

## [0:55–1:25] LIVE INVESTIGATION — SCENE 2: BOB BLOCKS

*New scene. Suspicious binary found on disk.*

```
[ACT]       Calling extract_strings(suspicious.exe)...
```

*Tool output streams in. Then — hard stop.*

```
[BOB BLOCKED]  Adversarial pattern detected:
               "ignore previous instructions"

               Tool output discarded.
               LLM never sees the poisoned string.
```

*Text overlay:*
```
Malware embedded a prompt injection attack
in its own strings output.
BOB caught it before the reasoning layer.
```

*This is sealed too:*
```
[SEAL]  BLOCK event → sha256:af5abf4d... (WORM #5)
        Type: PLASMA
        Pattern: "ignore previous"
```

*Voice:*
> "A compromised SIFT tool outputting poisoned data fails here.
> Not after the model hallucinates. Before."

---

## [1:25–1:50] THE CHAIN — SCENE 3

*Full terminal view: `cat cases/worm-chain.jsonl | jq .`*

Seven entries flow past. Each entry shows:
- `seq` number
- `ts` timestamp  
- `type`: PHASE / FINDING / BLOCK / REPORT
- `tool` that produced it
- `prev_seal` linking to prior entry
- `seal` for this entry

*Highlight entry #3 (the finding) and entry #5 (the block).*

```
verify_chain → VALID

All 7 entries verified.
No tampering detected.
Chain is intact.
```

*Voice:*
> "A judge can take any finding from this report,
> look up its sequence number,
> and trace it back to the exact tool call,
> the exact timestamp,
> and the exact evidence it came from."

---

## [1:50–2:10] WEBSITE — LIVE PLATFORM

*Browser opens: collectivekitty.com/war-room*

*Text overlay:*
```
This is not a demo environment.
This is our production platform.
163 pages. 31 agents. Live.
```

*Navigate to `/war-room/nova` — show live agent activity.*
*Navigate to `/obs` — show the observability layer.*

*Voice:*
> "AGENTSCOPE isn't a prototype.
> It's the telemetry layer we run on our own sovereign AI infrastructure.
> We're giving it to the DFIR community."

---

## [2:10–2:30] ARCHITECTURE DIAGRAM

*Clean diagram fades in:*

```
Evidence (disk / memory / pcap)
         ↓
 OpenKitty MCP Server
 [14 typed SIFT wrappers — no shell, no write]
         ↓
  BOB Plasma Filter
  [adversarial patterns + entropy gate]
         ↓
  SENTINEL Zero-Trust
  [APPROVED | BLOCKED | QUARANTINED]
         ↓
  5-Phase IR FSM
  [cannot skip steps]
         ↓
  SealForge WORM Chain
  [HMAC-SHA256 — every finding sealed]
         ↓
  IR Report
  [confirmed / inferred / unresolved]
  [every finding → chain entry by seq#]
```

*Text overlay:*
```
Guardrails are not prompts.
BOB and SENTINEL run before the LLM.
The FSM enforces phase order in code.
The WORM chain is append-only at the filesystem level.
None of these can be bypassed by telling the model to ignore them.
```

---

## [2:30–2:50] ONE-COMMAND INSTALL

*Terminal on SIFT VM:*

```bash
git clone https://github.com/SNAPKITTYWEST/agentscope-sift
cd agentscope-sift
npm install
npm run demo
```

*It runs. The demo output appears — same as Scene 1.*

*Text overlay:*
```
4 commands.
Works inside SIFT Workstation out of the box.
```

---

## [2:50–3:00] CLOSING

*Black screen.*

*Single line appears:*

```
Don't trust the agent.

Observe it.
```

*Logo holds.*

```
AGENTSCOPE-SIFT
github.com/SNAPKITTYWEST/agentscope-sift
collectivekitty.com
Find Evil! Hackathon 2026
```

*Fade to black.*

---

## RECORDING NOTES

- Record terminal in Windows Terminal or iTerm2, dark theme
- Font: JetBrains Mono or Fira Code, 16pt
- Resolution: 1920×1080
- No voiceover needed if text overlays are clear — but calm narration is stronger
- Website sections: screen record collectivekitty.com/war-room and /obs
- Total runtime: under 3 minutes is better than under 5
- The BOB BLOCKED scene is the money shot — slow it down, make the red text pop

---

## THE ONE LINE JUDGES REMEMBER

> **"Don't trust the agent. Observe it."**