First Scan Walkthrough

How to inspect the first scan from status to evidence.

What this is

This walkthrough shows the review order for one scan result.

When to use it

Use it when a scan produced findings and the reviewer needs to decide whether agent access is safe.

Command or example

uv run agent-permit scan . --ci --run-id first-review
open .agent-permit/runs/first-review/summary.md

Output to expect

The run folder contains a short summary, raw finding records, graph paths, permit status, and metrics.

How to interpret it

Review in this order:

Open summary.md for the plain-English result.
Open permit.yaml for the deterministic status.
Open raw-findings.json for file and rule evidence.
Open graph-paths.json for source-to-sink paths.
Run Deep Agent investigation only after scanner artifacts exist.

Common mistakes

Jumping directly to model output before scanner evidence.
Approving a finding without checking file and line evidence.
Assuming needs_review means false positive.

Quickstart

Install dependencies, run the first scan, and open the main artifacts.

Public Demo Artifacts

Sanitized scan outputs that show PermitGraph working on safe fixture repositories.

On this page

What this is When to use it Command or example Output to expect How to interpret it Common mistakes Related pages