Cover security and operational gates

Operational quality includes safe inputs, predictable resources, and recoverable changes. Add .venv/ to .gitignore; environments contain machine-specific executables and consume unnecessary space. Review dependency updates and avoid installing untrusted packages with look-alike names. Review what is written to disk or logs, which dependencies execute, and what another user can alter.

Read every command or statement before running it. The examples deliberately expose intermediate state so a surprising result has somewhere concrete to point.

python3 -m venv .venv
source .venv/bin/activate
python -m pip install pandas
python -m pip freeze > requirements.txt
python -c "import sys, pandas; print(sys.prefix); print(pandas.__version__)"

Expected evidence:

/project/.venv
2.x.x

The output may include version-specific details such as hashes, paths, fitted thresholds, or final decimal places. Compare the structural facts described here rather than copying placeholders. If the structure differs, stop and inspect the earliest unexpected line.

1. python3 -m venv .venv asks that exact interpreter to create the environment.
2. source changes shell variables so python resolves inside .venv on macOS and Linux.
3. python -m pip ties pip to the currently selected Python and avoids a mismatched executable.
4. freeze records resolved versions; the final command proves both interpreter location and import.

These lines form one chain: the interpreter version and declared package requirements becomes an isolated interpreter that imports the requested package at a recorded version. Change only one input first. When several values change together, you cannot tell which change caused the new behavior.

• First failure: an unchanged sys.prefix after activation means the activation command or shell path is wrong. Re-run the smallest command that proves the repair.
• Second failure: No module named pandas commonly means the editor or terminal is using a different interpreter. Preserve the failing input as a test when it represents a realistic mistake.
• Misleading success: a failing build after copying requirements.txt can indicate the file pins packages unavailable for the new Python or operating system. A clean-looking final line cannot cancel contradictory intermediate evidence.

When debugging, copy the exact error text and inspect names, paths, shapes, types, and versions. Explain the cause in one sentence before changing code. That discipline prevents a guessed repair from creating a second defect.

The input contract is the interpreter version and declared package requirements. The visible result is an isolated interpreter that imports the requested package at a recorded version.

For the current operate step, save the smallest useful evidence: the relevant command, its output, and the input that produced it. Do not use a screenshot as the only record when text can be copied and searched. Keep generated artifacts separate from source inputs so rerunning the example does not destroy the evidence it is meant to evaluate.

Run python -m pip check to detect incompatible installed requirements, then deactivate and reactivate. Rebuilding in a second temporary folder from python -m pip install -r requirements.txt is the strongest local reproducibility test.

Return to your opening prediction. Mark it correct or rewrite it with the condition you missed. Then explain the difference between a successful execution and a trustworthy result for this specific example.