Seven Executable Gates Before a Free Model Touches Real Data

Описание и применение

Скрипт с семью автоматическими проверками предотвращает запись реальных данных моделью, записывая доказательства и завершаясь с ошибкой при нарушении любой проверки.

Задача

A free AI model that writes files can become a program with user permissions, posing a security risk.

Результат

The script enforces seven safety gates, logs evidence, and prevents the model from writing real data unless all checks pass.

Рабочий процесс

• Define a minimal job with a single input and output file and a clear plan.
• Create a readiness.sh script that sets up exit‑on‑error and an evidence file.
• Implement gate() to run a command, log pass/fail, and exit on failure.
• Add seven gate calls: boundary, scope, budget, failure, rollback, diff, signoff.
• Write each gate script to check specific safety criteria and record evidence.
• Run readiness.sh before executing the AI task to ensure all gates pass.
• If any gate fails, the script stops and logs the failure.
• After all gates pass, the AI task proceeds and writes the output file.

Доказательства

A model that writes files is a program with your permissions.

Источник

Seven lines of gate calls. That is the whole checklist, and it is diffable in review.

Источник

A budget that logs and continues is not a budget. Wrap the call and count before you send.

Источник