Start with a simulated campaign.
Local setup, CLI commands, reports, and current limitations for Mallace.
Install the tested environment
The repository README documents Python 3.15 on Linux with an exact dependency snapshot in requirements.lock.txt. Create a virtual environment, install that file, and run the test suite before using the prototype. Other platform combinations have not been validated.
Run the simulation
From the repository root: .venv/bin/python main.py --mock. This uses simulated LLM and target behavior. It is useful for exploring the pipeline and generated reports, not assessing a real product’s security.
Explore the API
The prototype API starts with .venv/bin/python main.py --serve --mock --host 127.0.0.1. FastAPI’s interactive reference is available at /docs on that API server. API authentication and production authorization remain incomplete; keep this prototype local.
Inspect reports
Generated JSON, HTML, and SARIF files are written to the reports directory. Audit files and a local golden-dataset database may also be generated. Review outputs for sensitive information before sharing.
Development evidence
The latest recorded Python suite has 58 passing tests and 285 deprecation warnings. This is local test evidence, not a production readiness or security certification. Follow the changelog for the scope of those checks.