# AuditAI Investor Demo Script v2 (90s, PoC-First)

## Objective
Pitch AuditAI as a **PoC-first security copilot** with clear differentiation:
**Finding → PoC → Patch → Verify**

## Assets Used
- UI: `http://148.113.242.121:3000`
- Baseline benchmark: `demo-results/matrix.md`
- Investor pack matrix: `demo-results/investor-pack-matrix.md`
- Contracts:
  - `demo-results/contracts-investor-pack/10_price_oracle_stale.sol`
  - `demo-results/contracts-investor-pack/09_signature_replay.sol`
  - `demo-results/contracts/05_safe_vault.sol`

---

## Shot-by-shot Timeline (target 85–95s)

### 0–8s — Hook (Positioning)
**Visual:** AuditAI homepage (section title + buttons Analyze / Generate PoC / Verify Fix)

**Voice:**
"AuditAI bukan sekadar scanner. Ini PoC-first copilot: dari finding, langsung ke exploit template, patch, dan verifikasi fix."

---

### 8–30s — High-impact risk detection (Oracle)
**Visual:** Paste `10_price_oracle_stale.sol` → click **Analyze Contract**

**Focus on:**
- Summary
- Critical/High severity badges
- short vulnerability explanation

**Voice:**
"Contoh pertama: oracle misuse. AuditAI menangkap risiko stale/mispricing yang langsung berdampak ke borrow safety."

---

### 30–52s — PoC generation with artifacts
**Visual:** click **Generate PoC**

**Focus on:**
- vulnerability type
- artifact path (`artifact_dir`, `foundry_test_path`)
- generated Foundry test snippet
- patch diff section

**Voice:**
"Bukan berhenti di alert. AuditAI generate template PoC Foundry dan patch diff siap eksekusi, lalu simpan artifact supaya reproducible untuk tim security dan engineering."

---

### 52–70s — Verification loop (before/after)
**Visual:** paste patched code (atau safe patched variant) di **Verify Fix** section → click **Verify Fix**

**Focus on:**
- status: fixed / partially-fixed / not-fixed
- before vs after finding counts
- target removed true/false

**Voice:**
"Setelah patch, kita verifikasi otomatis. Jadi tim punya bukti before-after, bukan asumsi kalau masalah sudah selesai."

---

### 70–82s — Second threat class proof (Signature Replay)
**Visual:** quick switch ke `09_signature_replay.sol` → Analyze (singkat)

**Voice:**
"Threat class lain seperti signature replay juga terdeteksi. Ini penting buat coverage lintas pola eksploit, bukan single-case demo."

---

### 82–90s — Credibility close
**Visual:** open `investor-pack-matrix.md`

**Voice:**
"Internal benchmark tambahan menunjukkan deteksi konsisten di tx.origin misuse, weak randomness, DoS loop, signature replay, dan oracle risk. Next: CI integration dan team workflows untuk produksi."

---

## Delivery Notes
- Keep cursor movement clean, no frantic scrolling.
- Prioritize readability of severity + PoC artifacts + verify status.
- Avoid dead time while waiting; preload code snippets in clipboard tabs.
- If latency occurs, cut to matrix view and continue narration.

## Backup Plan (if live API slow)
1. Show previously generated artifact path in UI.
2. Open `demo-results/results-investor-pack/*.json` and `investor-pack-matrix.md`.
3. Continue with proof narrative (detection + reproducibility + verification loop).

## Final One-liner (closing)
"AuditAI turns security findings into executable evidence and verified remediation — fast enough for startup shipping velocity."