Set release boundaries for the two-cluster customer segmenter

Before release, define what the artifact refuses to do. The operational risks here are feature scale domination, empty clusters, and unstable labels. Validate ranges, minimize retained data, pin the reviewed configuration, and assign an owner who can disable the feature. Safety is implemented at the boundary and release process; it is not a warning paragraph placed after an unsafe function.

The artifact's user-facing goal is specific: group six unlabeled customers by annual visits and average basket value without pretending the groups are permanent identities. Its accepted input is rows shaped as (visits, basket_value), normalized before Euclidean distance. Those statements are intentionally narrower than “build an AI system.” Narrow scope lets us inspect every input and expected result, and it prevents a toy result from being presented as a production claim. Run this gate as part of a release command. A failed assertion means stop, investigate, and do not publish.

Save this as lesson.py and run python3 lesson.py. It uses only the language standard library, so the example is reproducible offline.

row={'visits':10,'basket':70}
assert 0 <= row['visits'] <= 365
assert 0 <= row['basket'] <= 10000
print('accepted aggregate row; no sensitive label inferred')

Expected output: the aggregate row passes without assigning a sensitive identity. Exact floating-point formatting may vary slightly, but the asserted behavior must not. Read the output as evidence about this stage, not merely proof that the interpreter started.

Print the scaled coordinates, distance from every point to every center, assignment vector, and recomputed centers. If only the numeric cluster IDs swap, the partition did not change; compare pairs of points rather than label 0 versus label 1. If one center receives no points, preserve or reseed it explicitly instead of dividing by zero. Re-run with several starting centers and inspect whether the same customers remain together.

At the safety and operations stage, save the smallest failing fixture beside the expected result. Change one cause at a time and rerun the exact command printed above; that makes the repair reviewable and keeps this chapter's progressive artifact reproducible.

Report WCSS beside a one-cluster baseline, then compare partitions across seeds. A lower WCSS always follows from adding clusters, so it cannot select k by itself. Review whether each segment has enough members and whether a plain-language description is supported by visits and basket value. Never name a segment with a personality or sensitive identity that the features do not measure.

For this safety and operations page, preserve the fixture and result as evidence for the next page. Label observations separately from conclusions: a passing assertion establishes the behavior it names, while broader usefulness requires the chapter's full evaluation set and stated operating limits.