# Boundary & Risk Card

Project: qdrant/fastembed

## Doramagic Trial Decision

Current decision: it can enter pre-publication recommendation checks. First use should still start with least privilege, a temporary directory, and reversible configuration.

## What The User Can Do Now

- Read the Human Manual first to understand the project purpose and main workflows.
- Use Prompt Preview for pre-install exploration; it validates interaction shape, not real execution.
- Run official Quick Start commands only inside an isolated environment, not a primary setup.

## Do Not Do Yet

- Do not treat Prompt Preview as a real project execution result.
- Do not treat metadata-only validation as sandbox installation validation.
- Do not describe unverified capabilities as supported, working, or safe to install.
- Do not provide production data, private files, real secrets, or primary host configuration on first trial.

## Pre-Install Checklist

- Host AI match: chatgpt
- Official installation entry status: official entry point found
- Isolated temporary directory, temporary host, or container validation: required
- Configuration rollback path: required
- API keys, network access, file access, or host configuration changes: treat as high risk until confirmed
- Installation command, actual output, and failure logs: must be recorded

## Current Blockers

- No blockers.

## Project-Specific Pitfalls

- 来源证据：[Bug]: Segmentation Fault or AssertionError during initialization on Python 3.14.2 (high): 可能增加新用户试用和生产接入成本。 Suggested check: 来源问题仍为 open，Pack Agent 需要复核是否仍影响当前版本。
- 来源证据：[Bug]: Unable to load 'Qdrant/bm25' on macOS python3.14 (high): 可能阻塞安装或首次运行。 Suggested check: 来源问题仍为 open，Pack Agent 需要复核是否仍影响当前版本。
- 失败模式：security_permissions: [Bug]: Tar path traversal (Zip Slip) in decompress_to_cache — arbitrary file write outside ca... (high): Developers may expose sensitive permissions or credentials: [Bug]: Tar path traversal (Zip Slip) in decompress_to_cache — arbitrary file write outside cache directory Suggested check: Before packaging this project, run the relevant install/config/quickstart check for: [Bug]: Tar path traversal (Zip Slip) in decompress_to_cache — arbitrary file write outside cache directory. Context: Observed when using python
- 失败模式：installation: The dependency `py-rust-stemmers` cannot be downloaded in a pure Python environment. (medium): Developers may fail before the first successful local run: The dependency `py-rust-stemmers` cannot be downloaded in a pure Python environment. Suggested check: Before packaging this project, run the relevant install/config/quickstart check for: The dependency `py-rust-stemmers` cannot be downloaded in a pure Python environment.. Context: Observed when using python, docker
- 失败模式：installation: [Bug]: Segmentation Fault or AssertionError during initialization on Python 3.14.2 (medium): Developers may fail before the first successful local run: [Bug]: Segmentation Fault or AssertionError during initialization on Python 3.14.2 Suggested check: Before packaging this project, run the relevant install/config/quickstart check for: [Bug]: Segmentation Fault or AssertionError during initialization on Python 3.14.2. Context: Observed when using python, windows, linux

## Risk And Permission Notes

- no_demo: medium

## Evidence Gaps

- No structured evidence gaps are currently visible.