Seven Executable Gates Before a Free Model Touches Real Data

Описание и применение

Скрипт с семью автоматическими проверками предотвращает запись модели в реальные файлы, записывая доказательства и завершаясь с ошибкой при неудаче.

A free model that writes files can act as a program with user permissions, posing a security risk.

The script enforces seven safety gates, logs evidence, and prevents a model from writing files unless all checks pass.

Define a minimal job with input, output, budget, and rollback plan.
Create a single bash file with set -euo pipefail and a gate() helper that logs JSON evidence.
Add seven gate() calls: boundary, scope, budget, failure, rollback, diff, signoff.
Implement each gate as a separate script or function that performs a specific check and writes evidence.
Wrap the budget check in a Python helper that counts tokens before sending a request.
Run the readiness.sh script against the job directory; if any gate fails, the script exits and logs the failure.
Review the evidence.jsonl file to confirm all gates passed before proceeding.

A gate that proves nothing is decoration.

The script exits non‑zero. It writes evidence. It refuses to continue.

Six of seven gates are mechanical. The seventh is a person.