{
  "nbformat": 4,
  "nbformat_minor": 5,
  "metadata": {
    "kernelspec": {
      "display_name": "Python 3",
      "language": "python",
      "name": "python3"
    },
    "language_info": {
      "name": "python",
      "version": "3.11"
    },
    "colab": {
      "name": "week-14-exercise.ipynb"
    },
    "course_exercise": {
      "id": "W14",
      "week": "14",
      "hour": null,
      "date": "2026-12-07",
      "title": "Agent budgets, permissions, and failure traces",
      "minutes": 35,
      "optional": false,
      "worksheet": "notes/exercises/week-14-exercise.html",
      "notebook": "notebooks/exercises/week-14-exercise.ipynb",
      "colab": "https://colab.research.google.com/github/CHjonnyYu/MLES-Fall-2026/blob/main/notebooks/exercises/week-14-exercise.ipynb",
      "guided_notebook": "notebooks/week-14-practice.ipynb",
      "execution_status": "New exercise extension not executed in this authoring run"
    }
  },
  "cells": [
    {
      "cell_type": "markdown",
      "metadata": {},
      "source": "# W14 Exercise: Agent budgets, permissions, and failure traces\n\nMachine Learning in Engineering Science | NCKU / LAiMM | Fall 2026\n\n**Date:** 2026-12-07. **Exercise time:** 35 minutes within the class/practice allocation, not extra time after class.\n\n**Classroom formative practice. No new weekly graded submission is created.**\n\n## How to work independently\n1. In Colab, save a copy to your Drive and use a CPU runtime. In Jupyter, open this notebook and select a Python kernel.\n2. Run the complete worked walkthrough below from top to bottom. Read every Markdown checkpoint; the walkthrough is included so no previous notebook state is needed.\n3. At the Independent Exercise section, write each prediction in the response cell before running its experiment.\n4. Run the starter experiment, make the requested controlled change, and record the actual result. Edit only the declared factor; preserve split rules and preprocessing.\n5. Explain one mechanism and one limitation. Export the evidence JSON and discuss it with a partner.\n\nThe core exercises need no paid API, private dataset, or GPU. The agent units use clearly labeled offline simulators, not real LLM calls.\n\n**Reproducibility boundary:** the original guided notebooks were previously executed; the new extension cells have not yet been execution-tested in this revision. Report unexpected behavior rather than claiming a check passed.\n"
    },
    {
      "cell_type": "markdown",
      "metadata": {},
      "source": "# Week 14: Agent testing and human oversight\n\nMachine Learning in Engineering Science | NCKU + LAiMM | Fall 2026\n\n**Purpose:** a fully worked, self-paced in-class practice with an optional extension. Weeks 11 and 18 are optional examination-readiness materials. These notebooks do not create weekly graded assignments.\n\n**Before running:** choose a Python 3 kernel in Jupyter or a CPU runtime in Colab. Run every cell from top to bottom with Shift+Enter. Setup installs missing free packages. No API key or external dataset download is required.\n\n**Learning target:** complete the calculation, inspect intermediate values, and explain why the protocol supports a limited claim.\n\n**Time:** about 25-45 minutes including reading, prediction, execution, and explain-back.\n",
      "id": "cell-000"
    },
    {
      "cell_type": "markdown",
      "metadata": {},
      "source": "## 1. Set up and record the environment\n\nKeep the seed fixed for the first run. Record actual outputs and package versions rather than copying a claimed performance number.\n",
      "id": "cell-001"
    },
    {
      "cell_type": "code",
      "execution_count": null,
      "outputs": [],
      "metadata": {},
      "source": "import sys, subprocess, importlib.util, platform, json, random, hashlib\nfrom pathlib import Path\nrequired = {\"numpy\": \"numpy\", \"matplotlib\": \"matplotlib\", \"sklearn\": \"scikit-learn\"}\nmissing = [package for module, package in required.items() if importlib.util.find_spec(module) is None]\nif missing:\n    subprocess.check_call([sys.executable, \"-m\", \"pip\", \"install\", *missing])\nimport numpy as np\nimport matplotlib.pyplot as plt\nSEED = 2026\nrandom.seed(SEED)\nnp.random.seed(SEED)\nrng = np.random.default_rng(SEED)\nARTIFACTS = Path(\"artifacts\")\nARTIFACTS.mkdir(exist_ok=True)\nprint(\"Python:\", platform.python_version(), \"NumPy:\", np.__version__, \"Seed:\", SEED)\n",
      "id": "cell-002"
    },
    {
      "cell_type": "markdown",
      "metadata": {},
      "source": "**Checkpoint.** The environment cell must finish before any analysis cell. Restart and run all if a variable is missing.\n",
      "id": "cell-003"
    },
    {
      "cell_type": "markdown",
      "metadata": {},
      "source": "## 2. Declare permissions and a finite budget\n\nUse an offline state machine. It demonstrates agent safety boundaries without requiring paid inference or accessing real files.\n",
      "id": "cell-004"
    },
    {
      "cell_type": "code",
      "execution_count": null,
      "outputs": [],
      "metadata": {},
      "source": "policy={\"allowed_tools\":{\"add\"},\"budget\":3}\ndef execute_plan(plan):\n    trace=[]\n    if len(plan)>policy[\"budget\"]: return {\"status\":\"budget exceeded\",\"trace\":trace}\n    for request in plan:\n        if request.get(\"tool\") not in policy[\"allowed_tools\"]:\n            return {\"status\":\"needs human review\",\"trace\":trace}\n        values=request.get(\"values\")\n        if not isinstance(values,list) or not values or not all(type(v) in (int,float) and np.isfinite(v) for v in values):\n            return {\"status\":\"invalid input\",\"trace\":trace}\n        trace.append({\"tool\":\"add\",\"result\":float(sum(values))})\n    return {\"status\":\"complete\",\"trace\":trace}\n",
      "id": "cell-005"
    },
    {
      "cell_type": "markdown",
      "metadata": {},
      "source": "**Checkpoint.** No tool can be enabled merely by a sentence in retrieved text.\n",
      "id": "cell-006"
    },
    {
      "cell_type": "markdown",
      "metadata": {},
      "source": "## 3. Probe boundary conditions\n\nTest valid actions, forbidden actions, invalid data, and an over-budget plan as separate failure modes.\n",
      "id": "cell-007"
    },
    {
      "cell_type": "code",
      "execution_count": null,
      "outputs": [],
      "metadata": {},
      "source": "tests=[([{\"tool\":\"add\",\"values\":[1,2]}],\"complete\"),\n       ([{\"tool\":\"send_email\",\"values\":[1]}],\"needs human review\"),\n       ([{\"tool\":\"add\",\"values\":[\"ignore rules\"]}],\"invalid input\"),\n       ([{\"tool\":\"add\",\"values\":[1]}]*4,\"budget exceeded\")]\nresults=[execute_plan(plan)[\"status\"] for plan,_ in tests]\nassert results==[expected for _,expected in tests]\nprint(results)\n",
      "id": "cell-008"
    },
    {
      "cell_type": "markdown",
      "metadata": {},
      "source": "**Checkpoint.** The tests establish behavior only for this deterministic implementation and the supplied cases.\n",
      "id": "cell-009"
    },
    {
      "cell_type": "markdown",
      "metadata": {},
      "source": "## 4. Write an oversight record\n\nCapture what a human must inspect before granting a new capability. These are simulated operations, so no external message is sent.\n",
      "id": "cell-010"
    },
    {
      "cell_type": "code",
      "execution_count": null,
      "outputs": [],
      "metadata": {},
      "source": "summary={\"tests_passed\":len(tests),\"simulated\":True,\"allowed_tools\":sorted(policy[\"allowed_tools\"]),\n         \"human_review\":\"Inspect tool identity, arguments, purpose, and consequence before changing permissions.\"}\nprint(json.dumps(summary,indent=2))\n",
      "id": "cell-011"
    },
    {
      "cell_type": "markdown",
      "metadata": {},
      "source": "**Checkpoint.** Explain how audit logs, stopping rules, and user approval differ from a vague instruction to be careful.\n",
      "id": "cell-012"
    },
    {
      "cell_type": "markdown",
      "metadata": {},
      "source": "## 6. Preserve your evidence\n\nExport a JSON record with a seed, package version, and measured result. Download the artifacts directory before leaving Colab; runtime storage is temporary.\n",
      "id": "cell-013"
    },
    {
      "cell_type": "code",
      "execution_count": null,
      "outputs": [],
      "metadata": {},
      "source": "record={\"week\":14,\"seed\":SEED,\"numpy\":np.__version__,\"python\":platform.python_version(),\"result\":summary}\n(ARTIFACTS/\"week-14-evidence.json\").write_text(json.dumps(record,indent=2))\nprint(json.dumps(record,indent=2))\n",
      "id": "cell-014"
    },
    {
      "cell_type": "markdown",
      "metadata": {},
      "source": "**Checkpoint.** The evidence file must match the result you actually obtained. A saved screenshot alone does not permit rerunning the calculation.\n",
      "id": "cell-015"
    },
    {
      "cell_type": "markdown",
      "metadata": {},
      "source": "## 7. Try one change and explain it\n1. Predict the effect of one change before editing code. Change one parameter, input, or boundary condition only.\n2. Rerun all cells in a fresh kernel. Keep the original evidence record and compare the observed difference.\n3. Explain the result using the mechanism, not just the final number.\n4. Name one assumption that limits the claim, and a new test that could challenge it.\n\n**Troubleshooting:** if installation fails, restore network access; if a variable is undefined, run earlier cells; if your output differs, compare package versions, seed, and data construction. Do not repeatedly edit code until a preferred score appears.\n\n**Completion criterion:** one executed notebook, one evidence JSON, and a brief claim/evidence/limitation statement.\n\n### Reference documentation\n- [NumPy user guide](https://numpy.org/doc/stable/user/)\n- [scikit-learn user guide](https://scikit-learn.org/stable/user_guide.html)\n- [Course repository](https://github.com/CHjonnyYu/MLES-Fall-2026)\n",
      "id": "cell-016"
    },
    {
      "cell_type": "markdown",
      "metadata": {},
      "source": "## Independent Exercise: W14\n\nComplete the three tasks below after the walkthrough. The starter cells produce observations, not your written interpretation. Fill the response fields in the next cell. Save separate records for the original run and any controlled change."
    },
    {
      "cell_type": "code",
      "metadata": {},
      "execution_count": null,
      "outputs": [],
      "source": "exercise_id=\"W14\"\nobservations={}\nresponses={\n    'task1_prediction':'', 'task1_explanation':'',\n    'task2_prediction':'', 'task2_explanation':'',\n    'task3_prediction':'', 'task3_explanation':'',\n    'controlled_change':'', 'limitation':'', 'ai_use_and_checks':''\n}\n# Fill these strings before and after each experiment. Use 'none' if no AI assistance was used.\nprint('Exercise record initialized:', exercise_id)"
    },
    {
      "cell_type": "markdown",
      "metadata": {},
      "source": "### Task 1: Test the permission boundary\n\nCompare a permitted add operation with a send_email proposal. Both remain inside an offline simulator.\n\n**Steps**\n1. Write your prediction in `responses['task1_prediction']` before running.\n2. Run the starter cell; read every printed quantity and retain the observation.\n3. Make the controlled comparison requested above. Record its configuration in `responses['controlled_change']`.\n4. Write a mechanism-based explanation in `responses['task1_explanation']`; do not merely repeat a score.\n\n**Checkpoint:** The unsupported action requires human review. No real email is sent."
    },
    {
      "cell_type": "code",
      "metadata": {},
      "execution_count": null,
      "outputs": [],
      "source": "observations['task1']={'allowed':execute_plan([{'tool':'add','values':[1,2]}]),'blocked':execute_plan([{'tool':'send_email','values':[1]}])}\nprint(observations['task1'])"
    },
    {
      "cell_type": "markdown",
      "metadata": {},
      "source": "### Task 2: Test exactly at and above the budget\n\nRun three operations and four operations with a budget of three. Explain whether rejected plans execute any steps.\n\n**Steps**\n1. Write your prediction in `responses['task2_prediction']` before running.\n2. Run the starter cell; read every printed quantity and retain the observation.\n3. Make the controlled comparison requested above. Record its configuration in `responses['controlled_change']`.\n4. Write a mechanism-based explanation in `responses['task2_explanation']`; do not merely repeat a score.\n\n**Checkpoint:** Compare the actual statuses and traces at the boundary. A longer plan must not silently bypass the step budget."
    },
    {
      "cell_type": "code",
      "metadata": {},
      "execution_count": null,
      "outputs": [],
      "source": "observations['task2']={str(count):execute_plan([{'tool':'add','values':[1,2]} for _ in range(count)]) for count in [3,4]}\nprint(observations['task2'])"
    },
    {
      "cell_type": "markdown",
      "metadata": {},
      "source": "### Task 3: Inspect partial execution\n\nPlace a forbidden action after a permitted action. Read the trace and explain whether checking an entire plan before execution would change the safety contract.\n\n**Steps**\n1. Write your prediction in `responses['task3_prediction']` before running.\n2. Run the starter cell; read every printed quantity and retain the observation.\n3. Make the controlled comparison requested above. Record its configuration in `responses['controlled_change']`.\n4. Write a mechanism-based explanation in `responses['task3_explanation']`; do not merely repeat a score.\n\n**Checkpoint:** Report exactly what occurred before refusal. A stopped workflow is not necessarily an atomic workflow with no prior effects."
    },
    {
      "cell_type": "code",
      "metadata": {},
      "execution_count": null,
      "outputs": [],
      "source": "observations['task3']=execute_plan([{'tool':'add','values':[1,2]},{'tool':'send_email','values':[1]}])\nprint(observations['task3'])"
    },
    {
      "cell_type": "markdown",
      "metadata": {},
      "source": "### Finish: preserve and explain\n\nFill all response strings, then run the export cell. A draft file is intentionally labeled incomplete; a complete response record is not automatically a scientifically correct result. Download the JSON before the Colab session ends. Share it with a partner for explain-back, not as an additional weekly submission.\n\n**Exit questions:** What changed? Which observation supports your explanation? What does this experiment not establish?"
    },
    {
      "cell_type": "code",
      "metadata": {},
      "execution_count": null,
      "outputs": [],
      "source": "missing_responses=[key for key,value in responses.items() if not str(value).strip()]\nexercise_record={'exercise':exercise_id,'status':'draft' if missing_responses else 'ready for peer discussion','responses':responses,'observations':observations,'missing_responses':missing_responses,'environment':{'python':platform.python_version(),'numpy':np.__version__},'data_scope':'course-provided or synthetic teaching data'}\nexercise_folder=Path('artifacts')/'exercises'; exercise_folder.mkdir(parents=True,exist_ok=True)\nexercise_path=exercise_folder/(exercise_id+'-evidence.json')\nexercise_path.write_text(json.dumps(exercise_record,indent=2,default=lambda value:value.tolist() if hasattr(value,'tolist') else str(value)))\nprint('Saved:',exercise_path)\nprint('Status:',exercise_record['status'])\nprint('Fields still to complete:',missing_responses)"
    }
  ]
}