When computers see
Set release boundaries for the 3x3 plus-sign classifier
Page 7 defines what the 3×3 plus-sign image classifier must refuse before release—security here is not a pasted happy path.
1Learn the idea
Read
Threats for this artifact only
Operational risks for the 3×3 plus-sign image classifier center on claiming 'computer vision' production readiness from 3×3 toys, plus the earlier failure mode (overfitting to one plus orientation, or leaking test grids into template design). Safety lives in executable gates, allowlists, redaction, and a named owner—not in a warning paragraph under an unsafe function.
Read
Run the release gate
meta={'image_id':'local-001','consent':True,'retention_days':0}
assert meta['consent'] and meta['retention_days']==0
print('process in memory; do not log pixels')
Expected evidence: stage evidence for security ops. A failed assertion means stop, investigate, and do not publish the 3x3 plus-sign classifier.
Read
Owner, retention, rollback
Name who can disable the feature, what data is retained, and how to roll back to the last known good artifact. Pin the reviewed configuration (versions, thresholds, allowlists) so “what shipped” is reconstructable for computer-sees.
Read
Lab notebook: release blocker
Write the release blocker as a predicate, not a feeling: “Do not ship the 3x3 plus-sign classifier if claiming 'computer vision' production readiness from 3×3 toys.” Pair it with a passing control that shows the reviewed configuration still works for plus, blank, and distractor 3×3 grids. Name an owner and a rollback handle (git tag, docs_version, previous image).
Security pages must not paste the happy-path demo. If your gate code looks like the implementation page, replace it with a deny/allow check aimed at claiming 'computer vision' production readiness from 3×3 toys.
Read
Worked judgment
State the data retention rule in one line (what is stored, for how long, who can read it). Then state the kill switch (env flag, config pin, or feature owner). The 3x3 plus-sign classifier is not shippable without both, even when accuracy on a fixed four-image set; feature activations printed looks healthy.
Read
Why this stage matters for the 3x3 plus-sign classifier
At the safety and operations stage for computer-sees, the job is narrower than finishing a product demo. You are creating one progressive evidence piece about plus, blank, and distractor 3×3 grids that later pages inherit without redefining success. Keep that fixture small enough to inspect by hand, keep outputs copy-pasteable as text, and refuse to narrate this baseline as if it were a production SLA: pixel-sum threshold accuracy on the same four images.
For this page specifically, success looks like an executable deny gate for the lab-specific threat while still centering the user decision to classify tiny binary images as plus vs not-plus with inspectable features. If you cannot point to a file, command, or assertion that proves that for the 3x3 plus-sign classifier, stay on this page instead of advancing.
Glossary: computer vision · Glossary: convolutional neural network
Go deeper
Before you start
Why this matters
Write an attack or unsafe misuse specific to this lab: claiming 'computer vision' production readiness from 3×3 toys. Predict whether your current code blocks it. Then run the gate below and compare.
In the wild
See how this idea shows up as a product and a company — then come back to the lesson. Skills transfer across vendors.
Related lessons
Check your understanding
Page assessment
Answer from memory. Completion is saved from this evidence, not from opening the next page.
All responses are required.