Tutorials
These are end-to-end, runnable walkthroughs. Where the Quickstart gets one agent running and the Edge command reference documents each command in isolation, a tutorial takes you through a complete flow from start to a proven result, using only real commands.
Every command in these tutorials is a real s9 command. Where a step depends on a
capability that is core-side or not yet wired, the tutorial says so plainly and
routes around it rather than faking success.
| Tutorial | What you do | Time |
|---|---|---|
| Enroll a device and operate it air-gapped | Enroll → mint a presence delegation by courier → run a governed mission with human-in-the-loop → export and verify the audit trail | ~20 min |
| Verify a Data Exchange listing offline | Pin a peer org's key → verify a hand-carried cross-org listing → see the deny-closed refusal path | ~10 min |
| Discover a data estate and carry it across a gap | Register a discovery leaf → scan a source in place → export a signed bundle → browse the catalog offline | ~15 min |
Conventions
- Commands are shown for a POSIX shell.
$VARSare placeholders you set. - A step that runs on a different machine (an operator workstation, not the device) is called out explicitly, several flows are deliberately split across a device and an operator to keep signing keys off the device.
- Removable-media paths use
/media/usb/...as a stand-in for whatever courier medium you use.
Before you start
Have the Quickstart working first. You should be able to run
s9 status and s9 doctor successfully on your device.