Definition

Placeholder Sentinel

A default value in a configuration or deployment artifact that encodes a substitution contract: “replace this string with the real value at install time”: but where the installer never fulfills the contract. The placeholder ships as the live value.

Common forms: a binary path like __STELLA_BIN__ in a shell hook wrapper that is never replaced, a template variable like {{DATABASE_URL}} in a deployed config that remains literal, a version stamp 0.0.0 in a package.json that never gets bumped. The failure mode is silent: the system starts, references the sentinel, fails in a way that may not produce an error (the hook exits non-zero but non-blocking, the URL resolves to nothing, the version check always shows stale).

Placeholder sentinels are a specific instance of the class of failures where the artifact shape is correct but the artifact content is not. Gates that validate schema cannot catch placeholder sentinels; only value-level checks or integration tests that verify actual behavior can.

Related: designed-then-built, falsification-harness