Orisan
Orisan

Archived Scout runbook

Scout-specific install and run notes.

This archived page documents the older Scout binary path. The current Orisan homepage leads with mcpscan and does not claim a curl install path for mcpscan.

Local CLI$
curl -fsSL https://orisan.org/install | sh
orisan scout --repo .
$ orisan scout --repo .

AI coding agents configured in this repo can read broad repository context, execute shell commands, and change repository history through commit or push behavior. Review is required before approving AI agent use in this repository.

Orisan Scout completed: 4 findings (critical: 0, high: 3, medium: 1, low: 0, info: 0)

Quick start

Defaults are intentionally boring.

repo

current directory

markdown/json

only when explicit flags are passed

default

terminal summary

Explicit flags still work: orisan scout --repo . --markdown report.md --json report.json

Release assets

These downloads are Scout-specific.

Release artifacts include macOS, Linux, and Windows binaries with sha256 checksums. Exact versions belong here and in GitHub Releases, not in the primary user flow.

Windows

irm https://orisan.org/install.ps1 | iex

Developer install from source

go install github.com/Orisan-org/orisan-scout/cmd/orisan@v0.2.0-alpha.2

Run sequence

A four-step runbook for alpha testers.

1. Install

curl -fsSL https://orisan.org/install | sh

2. Run

orisan scout --repo .

3. Optional files

orisan scout --repo . --markdown report.md --json report.json

4. Decide

Ask whether the report is clear enough to send to a reviewer without a live explanation.

Files created

What to expect after a successful run.

terminal summary

Default local output for quick review.

orisan-scout-review.md

Markdown review packet when --markdown is requested.

orisan-scout-review.json

Machine-readable evidence when --json is requested.

report_body_sha256

Deterministic body hash included in Markdown and JSON.

git metadata

Commit SHA and dirty status when the repo is a git checkout.

payload stored: false

Findings store metadata and matched reasons, not source payloads.

Smoke tests

Validate the CLI before sending results around.

Clean repo

Run in an empty temp repo. Expected: 0 findings and the clean v0.1 summary.

Risk fixture

Add a repo-local MCP filesystem mount or shell server. Expected: READ or EXECUTE findings.

Instruction fixture

Add AGENTS.md with shell or auto-commit language. Expected: EXECUTE or CHANGE findings.

Explicit paths

orisan scout --repo . --markdown report.md --json report.json

Alpha feedback

Tell us whether the approval record is useful.

Do not share source code, secrets, or private reports unless your policy allows it. Finding count, usefulness, noise, and missing coverage are enough.

Share feedback

Scope

v0.1 checks repo-local MCP configs and repo-level agent instructions.

.mcp.json.cursor/mcp.json.vscode/mcp.jsonAGENTS.mdCLAUDE.md.github/copilot-instructions.md.cursor/rules.windsurf/.codex/.continue/

Troubleshooting

Common alpha issues.

command not found

Confirm /usr/local/bin or ~/.local/bin is on PATH, then re-run the install command.

download blocked

Use the GitHub release assets from the advanced install section.

non-git repo

Scout still runs; git metadata will be marked unavailable.

unexpected clean result

Confirm the relevant config or instruction file is repo-local and in v0.1 scope.