Five offline demo scenarios, by audience (ISSO/ISSM, sysadmins, auditors, ATO, air-gap CI)

[cognis-digital]

The repo now ships five runnable, fully offline demo scenarios under demos/, each aimed at a different federal-compliance audience. They re-scan a bundled sample enclave (SCAP/SCC results across 4 hosts) and resolve NIST 800-53 rev5 control titles from a bundled OSCAL snapshot — no network, reproducible byte-for-byte.

PYTHONUTF8=1 python demos/run_all.py        # all five, end to end (exit 0)
PYTHONUTF8=1 python demos/02_isso_poam.py    # or just one

#	Scenario	Audience	What it shows
1	01_sysadmin_scan.py	Sysadmins	Raw SCAP rows -> severity-ranked, per-host fix-first worklist.
2	02_isso_poam.py	ISSO / ISSM	STIG findings -> eMASS POA&M CSV with real NIST Control Title column.
3	03_auditor_oscal.py	Assessors / auditors	Real OSCAL 1.1.2 Assessment Results, deterministic UUIDs.
4	04_ato_risk_brief.py	ATO / Authorizing Official	Composite risk + control-family rollup + Markdown brief.
5	05_airgap_pipeline.py	Air-gap / CI	Offline resolve, SARIF export, --fail-on build gate.

Every demo prints narrated output, exits 0, and is covered by tests/test_demos.py. See docs/DEMOS.md for the full write-up and docs/ARCHITECTURE.md for the check -> map -> POA&M flow.