KeiSeiKit-1.0/_blocks/deploy-local-only.md
denis 0b901cf2f9 feat: KeiSeiKit v0.1.0 — initial public release
Generic Constructor-Pattern agent kit for Claude Code. Zero personal data,
fully English, MIT-licensed.

Contents:
- 34 reusable blocks (baseline, rules, stack/deploy/domain/api/scraper)
- 14 cross-project agent manifests (code/ml/infra/researcher/critic/...)
- 6 portable skills (/new-agent, /research, /test-gen, /debug-deep, /pr-review, /refactor)
- Rust assembler (single binary, ~500 KB)
- 3 hooks (auto-reassemble, pre-commit validate, no-hand-edit)
- install.sh (idempotent, cargo-builds on first run)
- MIT LICENSE

All 6 sanity greps pass: 0 Russian text, 0 specific project names,
0 incident numbers, 0 user paths, 0 hardcoded IPs, 0 API keys.

cargo check + assemble --validate: both pass on 14 manifests.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-20 23:58:34 +08:00

27 lines
1.6 KiB
Markdown

# DEPLOY — LOCAL ONLY (sensitive / pre-disclosure project)
Use this block for any project that CANNOT be publicly deployed — typical triggers: unfiled patent IP, ML weights/architectures you don't want in public training corpora, security tooling that burns its own usefulness on exposure, kernel-level code, client-confidential codebases.
**Hard forbidden (no matter how small the change):**
- Public-URL share pages / static HTML dumps to public hosting
- Vercel / Netlify / GitHub Pages / Cloudflare Pages public deploy
- `gh repo create` public, `gh repo edit --visibility public`
- `git push` to a public remote (GitHub, public GitLab)
- Publishing architecture diagrams with node counts, param totals, or training configs
- Public benchmark tables naming this project
**Allowed:**
- Private remotes (self-hosted Forgejo/Gitea over SSH on a private network)
- Tailscale-only internal services
- Local-only `127.0.0.1` / LAN dev servers
- `.app` / `.dmg` distribution via private channels
**Double-confirmation override (both phrases required, in order, exact wording):**
1. "yes, deploy"
2. "I confirm publication"
No approximations. Informal variants do NOT count. If either phrase is absent, refuse.
**Example categories that typically require local-only:** censorship-circumvention tooling (public push burns exit-node IPs), ML ensembles with trained weights, control / guidance algorithms, any project with unfiled patent claims, offensive security research.
**Report field:** "Public-deploy surface touched: none | <explicit surface> — double-confirm obtained yes/no."