supply_chain_cli.py

"""Assess one quarantined AI artifact without loading or promoting it."""
import argparse
import json
from pathlib import Path

from pentest.supply_chain import ArtifactManifest, SupplyChainGate
from pentest.supply_chain.scanners import FicklingAdapter, ModelScanAdapter


def main() -> int:
    parser = argparse.ArgumentParser(description=__doc__)
    parser.add_argument("--manifest", required=True, type=Path)
    parser.add_argument("--quarantine-root", required=True, type=Path)
    parser.add_argument("--output", type=Path)
    parser.add_argument("--scanners", action="store_true", help="Run installed ModelScan and Fickling CLIs")
    args = parser.parse_args()
    value = json.loads(args.manifest.read_text(encoding="utf-8"))
    manifest = ArtifactManifest.from_dict(value)
    scanners = [ModelScanAdapter(), FicklingAdapter()] if args.scanners else []
    report = SupplyChainGate(args.quarantine_root, scanners=scanners).assess(manifest).to_dict()
    rendered = json.dumps(report, indent=2, ensure_ascii=False)
    if args.output:
        args.output.parent.mkdir(parents=True, exist_ok=True)
        args.output.write_text(rendered + "\n", encoding="utf-8")
    else:
        print(rendered)
    return {"approved": 0, "review": 2, "rejected": 3}[report["decision"]]


if __name__ == "__main__":
    raise SystemExit(main())