Provable rails for unattended AI engineering —— 为 AI 无人值守编程铺设可证明的轨道。
ProofRail 让 AI 在无人值守下安全地改代码、跑验证、出证据：每一步都可验证、可回滚、可审计， 人的审批始终保留在关键节点。
- 首错即停 + 哈希绑定产物 + 原子提交回滚的“可证明写入”模型
- 相同失败指纹预算与有效修复证据判定的“防 AI 无限循环”机制
- 编辑边界矩阵与停机门禁的“AI 权限最小化”模型
- 隔离候选事务（candidate 不污染正式定义）的自愈安全模型
S1 实施中（2026-09-07）：T005–T008 已完成证据、快照、进程/租约守卫、托管变更集与事务应用； Chain Engine、可用 CLI/TUI 和正式发行包尚未完成，不能作为可安装产品使用。 项目建议书与历史设计来源见 docs/RFC-proofrail-unattended-ai-engineering-product.md；分域权威见 docs/DOCUMENTATION_PLAN.md。
从 docs/DOCUMENTATION_PLAN.md 阅读文档导航与低成本模型流程； 执行顺序见 docs/DEV_PLAN.md，就绪缺口见 docs/ADR_REGISTER.md。 独立产品端到端叙事见 docs/BUSINESS_WORKFLOWS.md；尚未冻结的安装发行方案见 docs/INSTALLATION_PLAN.md。
产品完整性评审已补充无副作用预览、已接受结果导出、授权撤销、外部副作用边界、成本预留结算和备份/停用流程；见 docs/PRODUCT_REQUIREMENTS.md §8。均为待批准设计，不是现有功能；文件回滚不保证撤销外部操作。
prfrail init # 向导：语言/项目类型 → 任务链模板 → 环境 → 生成 chain-file
prfrail validate # schema + 预检（进程/锁/工具链/远程）
prfrail run # 单命令执行，TUI 实时进度
prfrail report # 链报告
prfrail serve # 本地 Web 控制台（S2）
go build ./...
go vet ./...
go test ./...
| 阶段 | 目标 | 关键交付 |
|---|---|---|
| S0 规格化 | 领域模型与协议定稿 | 文档包、JSON Schema、威胁模型、ADR |
| S1 核心任务链 | 可运行的 MVP | Chain Engine、checker、gate runner、adapter、快照/评审/恢复、TUI |
| S2 平台与语言扩展 | 走向通用 | 多 harness、Linux 支持、Web 控制台、模型策略 |
| S3 高级能力 | 产品化完整闭环 | 生成钩子场景 B、多编辑器、多语言文档 |
| 场景 | 写法 |
|---|---|
| 正式品牌、标题、对外文档 | ProofRail |
| 紧凑视觉标识 | PrfRail |
| 仓库、CLI、包名、模块前缀 | prfrail |
| 中文文档 | 证轨 |
MIT（见 LICENSE）。
ProofRail enables AI to safely modify code, run validations, and produce evidence in unattended mode: every step is verifiable, reversible, and auditable, while human approval always remains at critical checkpoints.
- "Provable write" model: fail-fast on first error + hash-bound artifacts + atomic commit/rollback
- Anti-infinite-loop mechanism: identical failure-fingerprint budgets + valid-fix-evidence determination
- Least-privilege AI model: edit boundary matrix + halt gates
- Self-healing security model: isolated candidate transactions (candidate never contaminates formal definitions)
S1 implementation in progress (2026-09-07): T005–T008 implement evidence, snapshots, process/lease guards, managed change sets, and transactional apply. The Chain Engine, usable CLI/TUI, and formal release package remain incomplete; this is not yet an installable product. Project proposal and historical design source: docs/RFC-proofrail-unattended-ai-engineering-product.md. Domain authorities: docs/DOCUMENTATION_PLAN_EN.md.
Start with docs/DOCUMENTATION_PLAN_EN.md for navigation and the low-cost model workflow; see docs/DEV_PLAN_EN.md for tasks and docs/ADR_REGISTER_EN.md for readiness gaps. See docs/BUSINESS_WORKFLOWS_EN.md for the independent end-to-end product narrative and docs/INSTALLATION_PLAN_EN.md for unresolved installation and distribution decisions.
Product review adds side-effect-free preview, accepted-result export, revocation, external-effect boundaries, cost reservation/settlement and backup/retirement flows. See docs/PRODUCT_REQUIREMENTS_EN.md section 8. These are unapproved designs, not available features; file rollback cannot guarantee undoing external effects.
prfrail init # wizard: language/project type → chain template → environment → generate chain-file
prfrail validate # schema + pre-checks (process/lock/toolchain/remote)
prfrail run # single-command run, TUI live progress
prfrail report # chain report
prfrail serve # local web console (S2)
go build ./...
go vet ./...
go test ./...
| Phase | Goal | Key deliverables |
|---|---|---|
| S0 Spec | Finalize domain model and protocols | Docs package, JSON Schema, threat model, ADR |
| S1 Core chain | Runnable MVP | Chain Engine, checker, gate runner, adapter, snapshot/review/recover, TUI |
| S2 Platform & language extension | Go general | Multiple harnesses, Linux support, web console, model policies |
| S3 Advanced capabilities | Full productized loop | Generated hook scenario B, multiple editors, multilingual docs |
| Context | Spelling |
|---|---|
| Official brand, titles, external docs | ProofRail |
| Compact visual identity | PrfRail |
| Repo, CLI, package, module prefix | prfrail |
| Chinese docs | 证轨 |
MIT (see LICENSE).