First AI Success = I can safely send one Prompt to OpenAI, receive one answer, leave verifiable evidence, and expose no API key. 第一个 AI 成功 = 我能安全地把一个 Prompt 发给 OpenAI, 收到一个答案, 留下可验证证据, 并且没有暴露 API Key。
ssh yourname@172.203.217.218 Success screen: yourname@Gmall:~$
能进入 Azure AI Sandbox。
https://usasanbox.homelinked.tech/yourname/api/ai/status
看到 key 是否存在,但不会显示 key。
https://usasanbox.homelinked.tech/yourname/api/ai/openai?prompt=Say%20hello&token=YOUR_DEMO_TOKEN
OpenAI 返回一个答案。这个就是第一核心成功。
Screenshot Today I Made Today I Tried Next Step
留下截图和三句话。
Where is app.py? Where is .env? How to restart? What URL works? What should not be exposed?
下一个人能继续。
1. Login
2. cd ~/work
3. cp .env.example .env
4. Add DEMO_TOKEN and OpenAI test key into .env
5. chmod 600 .env
6. sudo systemctl restart usaai-yourname
7. Open /api/ai/status
8. Open /api/ai/openai with one prompt
9. Screenshot
10. Write:
Today I Made
Today I Tried
Next Step
cd ~/work cp .env.example .env nano .env python3 -c "import secrets; print(secrets.token_urlsafe(12))" chmod 600 .env sudo systemctl restart usaai-yourname sudo systemctl status usaai-yourname --no-pager
DEMO_TOKEN=your_random_demo_token OPENAI_API_KEY=your_test_openai_key OPENAI_MODEL=gpt-4o-mini
Do not put API Key inside app.py.
不要把 API Key 写进 app.py。
https://usasanbox.homelinked.tech/yourname/api/ai/status https://usasanbox.homelinked.tech/yourname/api/ai/openai?prompt=Say%20hello&token=YOUR_DEMO_TOKEN
Replace yourname with your sandbox username.
把 yourname 换成你的 sandbox 用户名。
Success: - I logged in. - I added API key only in .env. - /api/ai/status shows openai_key_present: true. - I submitted one Prompt. - OpenAI returned one answer. - I took a screenshot. - I wrote Today I Made / Today I Tried / Next Step.
Not success: - API key is written inside app.py. - API key is shown on a webpage. - .env is uploaded or copied to public place. - Prompt URL exposes API key. - Student only says "it works" but leaves no screenshot. - Student tests Gemini now without Admin confirmation.
Never expose: OpenAI API Key .env SSH private key password company secret customer data personal data Use test key only. Sandbox first. Trusted publish later.
Today I Made: I sent one Prompt to OpenAI from my Azure AI Sandbox Runtime. Today I Tried: I opened my API URL and received one answer from OpenAI. Next Step: I will change the prompt and make one small useful demo for my own project.
Published 2026-07-30 15:39 HKT · USA AI Sandbox · First AI Success Guide.