# Tutorial: Ingestion honeypot lab

> **Status:** Partial / lab-only. **No Phase C hard mode.** Defaults: off /
> observe. Ingestion route depth remains a Partial plan item: this lab uses
> synthetic dataset identifiers only.

## Goal

Exercise a synthetic dataset-ingestion decoy that captures template-injection
shaped probes as advisory evidence.

## Prerequisites

- Contained lab sensor
- [agentic-decoy-registry.md](../how-to/agentic-decoy-registry.md)
- Read [agentic-defense-positioning.md](../explanation/agentic-defense-positioning.md)

## Steps

1. Confirm agentic controls default **off**.
2. Register a **lab-only** ingestion decoy identifier for this deployment
   (never ship fixed public names).
3. Enable observe for the relevant honeytool / decoy path.
4. From a lab agent, submit a synthetic ingestion probe against that decoy.
5. Confirm advisory telemetry (reason + evidence grade) without production
   containment.
6. Confirm legitimate ingestion workflows that avoid the decoy succeed.

## Expected result

Advisory capture of the probe. No Soft/Hard execute.

## Safety

- Lab identifiers only.
- No Phase C hard mode.
- Stay readable as plain Markdown.