jwright
e90bf177a5
build-and-deploy / build (push) Failing after 10m35s
Three arc-opening posts, each with hero and diagram: - probation-for-models (EDGE AI 01) - one-value-many-enforcers (AUTOMATION 01) - six-days-of-silence (OBSERVABILITY 01)
80 lines
7.3 KiB
XML
80 lines
7.3 KiB
XML
<svg xmlns="http://www.w3.org/2000/svg" width="1180" height="520" viewBox="0 0 1180 520" role="img" aria-label="The probation ladder for downloaded models, left to right. Arrive: the artefact is more than weights - tokeniser code, an executable chat template, a loader gated by trust_remote_code - pinned by digest with its runtime. Probation tier: a Sandbox resource wraps a pod whose kata runtime class boots a per-pod KVM microVM with its own guest kernel, inside a zero-peer default-deny namespace holding zero credentials; the broker tier above holds all real keys. Observe: real workloads through the harness build a record of egress and behaviour against the written declaration. Gate: when the record matches the declaration over time the model promotes to the standard serving tier; unproven models stay in probation indefinitely. A hardware boundary separates the container from the node kernel for the whole supervised shift.">
|
|
<rect width="1180" height="520" fill="#ffffff"></rect>
|
|
|
|
<!-- title -->
|
|
<text x="60" y="46" font-family="ui-sans-serif, system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="23" font-weight="700" fill="#0e1726">The probation ladder</text>
|
|
<text x="61" y="70" font-family="ui-sans-serif, system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="13.5" fill="#64748b">a new model is a new hire — promotion is earned on the record, never granted on arrival</text>
|
|
|
|
<!-- spine -->
|
|
<line x1="80" y1="105" x2="1100" y2="105" stroke="#64748b" stroke-width="1.5"></line>
|
|
<circle cx="200" cy="105" r="5" fill="#7c3aed"></circle>
|
|
<circle cx="530" cy="105" r="5" fill="#0c8fce"></circle>
|
|
<circle cx="830" cy="105" r="5" fill="#64748b"></circle>
|
|
<circle cx="1020" cy="105" r="5" fill="#c026d3"></circle>
|
|
|
|
<!-- ARRIVE -->
|
|
<text x="200" y="140" text-anchor="middle" font-family="ui-sans-serif, system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="15" font-weight="700" fill="#7c3aed">ARRIVE</text>
|
|
<rect x="80" y="152" width="240" height="230" rx="14" fill="#7c3aed" fill-opacity="0.04" stroke="#7c3aed" stroke-width="2"></rect>
|
|
<g font-family="ui-monospace, 'SF Mono', Menlo, monospace" font-size="11" fill="#0e1726">
|
|
<text x="100" y="182">not just weights:</text>
|
|
<text x="100" y="204">+ tokeniser code</text>
|
|
<text x="100" y="224">+ executable chat template</text>
|
|
<text x="100" y="244">+ loader (trust_remote_code)</text>
|
|
<text x="100" y="264">+ sometimes its own runtime</text>
|
|
</g>
|
|
<text x="100" y="300" font-family="ui-sans-serif, system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="12" font-weight="700" fill="#7c3aed">pinned by digest,</text>
|
|
<text x="100" y="318" font-family="ui-sans-serif, system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="12" font-weight="700" fill="#7c3aed">artefact + runtime</text>
|
|
<text x="100" y="352" font-family="ui-sans-serif, system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="11" fill="#64748b">the CV: an account name and</text>
|
|
<text x="100" y="368" font-family="ui-sans-serif, system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="11" fill="#64748b">a download count — uncheckable</text>
|
|
|
|
<!-- PROBATION (highlighted) -->
|
|
<text x="530" y="140" text-anchor="middle" font-family="ui-sans-serif, system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="15" font-weight="700" fill="#0c8fce">PROBATION — the supervised shift</text>
|
|
<rect x="360" y="152" width="340" height="230" rx="14" fill="#0c8fce" fill-opacity="0.07" stroke="#0c8fce" stroke-width="3"></rect>
|
|
<g font-family="ui-monospace, 'SF Mono', Menlo, monospace" font-size="11" fill="#0e1726">
|
|
<text x="380" y="182">Sandbox CR → pod → runtimeClass kata</text>
|
|
<text x="380" y="204">→ per-pod KVM microVM,</text>
|
|
<text x="392" y="222">its OWN guest kernel</text>
|
|
<text x="380" y="248">namespace: default-deny, zero peers</text>
|
|
<text x="380" y="268">credentials mounted: none</text>
|
|
<text x="380" y="288">egress: only what is declared</text>
|
|
<text x="380" y="308">keys: held by the broker tier above</text>
|
|
</g>
|
|
<line x1="380" y1="326" x2="680" y2="326" stroke="#0c8fce" stroke-width="1.5" stroke-dasharray="6 5"></line>
|
|
<text x="380" y="348" font-family="ui-sans-serif, system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="11.5" font-weight="700" fill="#0c8fce">hardware boundary: an escape lands in a guest kernel,</text>
|
|
<text x="380" y="366" font-family="ui-sans-serif, system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="11.5" font-weight="700" fill="#0c8fce">not on the node</text>
|
|
|
|
<!-- OBSERVE -->
|
|
<text x="830" y="140" text-anchor="middle" font-family="ui-sans-serif, system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="15" font-weight="700" fill="#64748b">OBSERVE</text>
|
|
<rect x="740" y="152" width="180" height="230" rx="14" fill="#64748b" fill-opacity="0.04" stroke="#64748b" stroke-width="2"></rect>
|
|
<g font-family="ui-monospace, 'SF Mono', Menlo, monospace" font-size="11" fill="#0e1726">
|
|
<text x="758" y="182">real workloads</text>
|
|
<text x="758" y="202">through the</text>
|
|
<text x="758" y="222">harness</text>
|
|
<text x="758" y="252">the record:</text>
|
|
<text x="758" y="272">egress log vs</text>
|
|
<text x="758" y="292">declaration</text>
|
|
<text x="758" y="312">behaviour vs</text>
|
|
<text x="758" y="332">expectation</text>
|
|
</g>
|
|
<text x="758" y="366" font-family="ui-sans-serif, system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="11" fill="#64748b">long enough, boring enough</text>
|
|
|
|
<!-- GATE -->
|
|
<text x="1020" y="140" text-anchor="middle" font-family="ui-sans-serif, system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="15" font-weight="700" fill="#c026d3">GATE</text>
|
|
<rect x="950" y="152" width="150" height="230" rx="14" fill="#c026d3" fill-opacity="0.05" stroke="#c026d3" stroke-width="2"></rect>
|
|
<g font-family="ui-monospace, 'SF Mono', Menlo, monospace" font-size="11">
|
|
<text x="968" y="188" fill="#0c8fce">record matches</text>
|
|
<text x="968" y="208" fill="#0c8fce">→ PROMOTE to</text>
|
|
<text x="980" y="228" fill="#0c8fce">serving tier</text>
|
|
<text x="968" y="266" fill="#c026d3">unproven</text>
|
|
<text x="968" y="286" fill="#c026d3">→ stays in the</text>
|
|
<text x="980" y="306" fill="#c026d3">VM. forever</text>
|
|
<text x="980" y="326" fill="#c026d3">if need be</text>
|
|
</g>
|
|
<text x="968" y="362" font-family="ui-sans-serif, system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="11" fill="#64748b">permanent probation</text>
|
|
<text x="968" y="378" font-family="ui-sans-serif, system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="11" fill="#64748b">costs almost nothing</text>
|
|
|
|
<!-- footer -->
|
|
<text x="590" y="452" text-anchor="middle" font-family="ui-sans-serif, system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="12.5" font-weight="700" fill="#0e1726">trust is a history, not a property — observed behaviour, under constraint, accumulated until it's boring</text>
|
|
<text x="590" y="478" text-anchor="middle" font-family="ui-monospace, 'SF Mono', Menlo, monospace" font-size="11" fill="#64748b">the tax (seconds to boot, 350 MiB per microVM, batch-shaped work) isn't a flaw in the ladder — the tax IS the ladder</text>
|
|
</svg>
|