# Tutorial: Install Phase A (agentic advisory)

> **Status:** Lab-only. Defaults stay **off** until you enable observe.
> No Phase C Soft/Hard execute in this tutorial.

## Goal

Install the sensor with Phase A agentic defense support in under ten minutes,
enable honeytools in **observe** mode, and confirm the control is armed: without
application code changes.

## Prerequisites

- Go toolchain (1.22+)
- Git checkout of CyberHalluciNet
- Loopback-only lab (do not Internet-bind)

## Install (one command)

From the repo root:

```bash
make agentic-lab-install
# equivalent: ./scripts/agentic-lab-install.sh
```

This builds `bin/sensor` (and `bin/enforcementplane` for the Phase C tutorial)
and writes lab secrets under `.local/agentic-lab/env.sh` (gitignored).

```bash
source .local/agentic-lab/env.sh
```

## Enable Phase A observe

Defaults are **off**. Enable honeytools observe only:

```bash
export CYBERHALLUCINET_AGENTIC_HONEYTOOLS=observe
# optional:
# export CYBERHALLUCINET_AGENTIC_SHADOW_INDEX=1
# export CYBERHALLUCINET_AGENTIC_TARPIT=1
# export CYBERHALLUCINET_AGENTIC_STREAM_GUARD=1
```

Or copy the `agentic_defense:` block from `config/sensor.example.yaml` into your
lab sensor config and set `honeytools.mode: observe`.

## Start the sensor

Use your existing Contained lab listen flags (SSH/HTTP/MCP as usual). Example
shape: adjust ports to your lab:

```bash
./bin/sensor --config=config/sensor.example.yaml
```

On startup, look for a log line that includes `agentic_defense armed` with
`honeytools=observe` (advisory; `ops_executes=false`).

## Verify

1. Confirm honeytools mode is **observe** (not off) in the arming log.
2. Confirm production task paths still succeed (do-no-harm).
3. Optionally touch a **lab-only** decoy tool name for this deployment
   (never publish production identifiers): see
   [catch-a-hijacked-agent.md](catch-a-hijacked-agent.md).

## What you installed

| Piece | Role |
|-------|------|
| `bin/sensor` | Phase A advisory controls (`agentic_defense:`) |
| `.local/agentic-lab/env.sh` | Loopback secrets + identity placeholders |
| Config keys | [agentic-config-keys.md](../reference/agentic-config-keys.md) |

## Safety

- Defaults remain off until you export observe flags.
- Do not put `CYBERHALLUCINET_ENFORCEMENT_AUTH_TOKEN` or `DUALKEY_MAC` on the sensor.
- No Soft/Hard execute in this path.

## Next

- [Install Phase C Beta](install-agentic-phase-c-beta.md)
- [Catch a hijacked agent](catch-a-hijacked-agent.md)

## Related

- Positioning: [agentic-defense-positioning.md](../explanation/agentic-defense-positioning.md)
- How-to: [agentic-lab-install.md](../how-to/agentic-lab-install.md)