# Tutorial: Agentic red-team replay

> **Status:** Lab-only. **No Phase C hard mode.** Defaults: off / observe.

## Goal

Run the A4.3-style replay harness and confirm fixtures map to ASI/ATLAS IDs and
expected evidence grades without shipping OWASP prose.

## Prerequisites

- Go toolchain
- Package: `engine/tests/agentic/replay/`
- Read [agentic-threat-model.md](../explanation/agentic-threat-model.md)

## Steps

1. Confirm honeytool defaults remain `off` in harness assumptions.
2. From `engine/`:

   ```bash
   go test ./tests/agentic/replay/ -count=1
   ```

3. Inspect fixture IDs (`tool-hijack`, `memory-poison`, `shareleak-shaped`) : 
   identifiers only; no copied third-party prose.
4. Confirm `observed_anomaly` is not active-response-eligible; decoy-touch /
   canary grades match harness expectations.
5. Optionally enable sensor observe and replay a single lab touch outside the
   unit harness (see [catch-a-hijacked-agent.md](catch-a-hijacked-agent.md)).

## Expected result

Harness passes. No Soft/Hard execute path is exercised.

## Safety

- Do not paste OWASP CC BY-SA text into fixtures or docs.
- No Phase C hard mode in this tutorial.