Build a Fail-Closed Ship Folder for a Small AI CLI

说明与用途

创建包含必需文件的 ship 文件夹，以确保使用免费 AI 服务器的小型 CLI 安全发布，遵循 fail‑closed 和回滚规则。

问题

Ensuring a small AI CLI can be shipped safely when using free, unreliable AI models, without hidden failures or side effects.

结果

The ship folder guarantees that the CLI will not ship unless all evidence files are present and meet size thresholds, enforcing fail‑closed logic and clear rollback paths.

工作流

• Create ship/ folder next to CLI
• Write GOAL.md with single task, user, and constraints
• Write BOUNDARY.md with time, cost, blast radius limits
• Freeze a single prompt fixture in PROMPT_FIXTURE.json
• Define FAIL_CLOSED.md rules for silent failures
• Specify ROLLBACK.md steps for quick exit
• Document COST.md limits for free model usage
• Provide HEALTH.json schema for health checks
• Write ABANDON.md walk‑away conditions
• Implement checker script that verifies presence and size of all files

证据

If the checker exits nonzero, I stop. No "just this once" merge. That is the fail‑closed rule.

来源

Write only the cap you will enforce yourself. Anything else is marketing in a runbook.

来源