icebox-gov 0.1.0

Runtime governance for autonomous offensive security — the single seam every human operator, REST client, and LLM agent must pass through before anything touches a target.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53

# Installation

ICEBOX ships as a single static binary plus a Python SDK. Pick the channel
you prefer — they all install the same `icebox` binary.

## One-liner (curl | sh)

```sh
curl -sSfL https://raw.githubusercontent.com/Devaretanmay/icebox/main/dist/install.sh | sh
```

macOS users: the binary is not Apple-signed, so Gatekeeper may block the
first run. Clear the quarantine bit with:

```sh
xattr -dr com.apple.quarantine "$(command -v icebox)"
```

## Homebrew (planned)

Homebrew is not wired up yet. Until then, use the one-liner, `cargo install`,
or Docker.

## Cargo

```sh
cargo install icebox
```

## Docker (GHCR — no Docker Hub)

```sh
docker pull ghcr.io/devaretanmay/icebox:latest
docker run --rm -p 8443:8443 ghcr.io/devaretanmay/icebox
```

## Python SDK

```sh
pip install icebox-sdk
```

The Python SDK wraps the compiled `libicebox` C ABI via `ctypes`. If you
install `icebox-sdk` without building the native lib, obtain `libicebox`
from any of the channels above (the SDK auto-discovers it next to the
package, or set `ICEBOX_CAPI` to its path).

## Verify

```sh
icebox --version
python -c "from icebox import Governance; print('ok')"
```