Seven Executable Gates Before a Free Model Touches Real Data

说明与用途

一个包含七个自动化门的脚本防止模型写入真实数据，记录证据并在任何门失败时退出。

问题

A free AI model that writes files can become a program with user permissions, posing a security risk.

结果

The script enforces seven safety gates, logs evidence, and prevents the model from writing real data unless all checks pass.

工作流

• Define a minimal job with a single input and output file and a clear plan.
• Create a readiness.sh script that sets up exit‑on‑error and an evidence file.
• Implement gate() to run a command, log pass/fail, and exit on failure.
• Add seven gate calls: boundary, scope, budget, failure, rollback, diff, signoff.
• Write each gate script to check specific safety criteria and record evidence.
• Run readiness.sh before executing the AI task to ensure all gates pass.
• If any gate fails, the script stops and logs the failure.
• After all gates pass, the AI task proceeds and writes the output file.

证据

A model that writes files is a program with your permissions.

来源

Seven lines of gate calls. That is the whole checklist, and it is diffable in review.

来源

A budget that logs and continues is not a budget. Wrap the call and count before you send.

来源