Seven Executable Gates Before a Free Model Touches Real Data

说明与用途

一个包含七个自动化门的脚本防止模型写入真实文件，记录证据并在失败时退出。

问题

A free model that writes files can act as a program with user permissions, posing a security risk.

结果

The script enforces seven safety gates, logs evidence, and prevents a model from writing files unless all checks pass.

工作流

• Define a minimal job with input, output, budget, and rollback plan.
• Create a single bash file with set -euo pipefail and a gate() helper that logs JSON evidence.
• Add seven gate() calls: boundary, scope, budget, failure, rollback, diff, signoff.
• Implement each gate as a separate script or function that performs a specific check and writes evidence.
• Wrap the budget check in a Python helper that counts tokens before sending a request.
• Run the readiness.sh script against the job directory; if any gate fails, the script exits and logs the failure.
• Review the evidence.jsonl file to confirm all gates passed before proceeding.

证据

A gate that proves nothing is decoration.

来源

The script exits non‑zero. It writes evidence. It refuses to continue.

来源

Six of seven gates are mechanical. The seventh is a person.

来源