Refusing the Free Lane: A Red-Flag Gate You Can Run in CI

说明与用途

一个自动化的 CI 门控脚本，基于加权红旗评分拒绝工作负载，防止免费容量被过度使用。

问题

Deciding whether to allow a workload to run on a free capacity lane can lead to costly retries, data exposure, and contractual violations.

结果

The harness automatically refuses workloads exceeding a score of 12, shadows those between 5 and 12, and admits others, preventing costly overuse of free capacity.

工作流

• Load policy.json
• Load workload manifest
• Compute weighted score for each red‑flag flag
• Compare score to refuse and shadow thresholds
• Return verdict (refuse, shadow, admit) and exit non‑zero if refused

证据

The harness below uses only the Python standard library. It reads a policy file and a workload manifest, then exits non-zero on refusal.

来源

Seven red flags worth acting on ... Each flag below describes the workload, not a vendor.

来源