Demo mode

Pre-recorded investigation. Zero credentials, zero API calls.

Demo mode replays a baked-in investigation against synthetic billing data. No Anthropic key, no cloud SDK, no network.

ghosthunter demo --provider gcp
ghosthunter demo --provider aws

Use this for first-look, screenshots, conference talks, or any environment where you can't make outbound API calls.

The demo data ships inside the package at ghosthunter/sample_data/ and is the same data used by the test suite, so what you see is exactly what's covered by tests.