\u5B89\u5168\u8BF4\u660E \xB7 AI \u7F51\u9875\u901A

1. \u76EE\u5F55\u6743\u9650\u4E0E\u8DEF\u5F84\u68C0\u67E5

AI \u7F51\u9875\u901A\u7684\u6240\u6709\u6587\u4EF6\u8BBF\u95EE\u8BF7\u6C42\u5FC5\u987B\u7ECF\u8FC7\u5E95\u5C42\u7684 Permission Guard \u5F15\u64CE\u68C0\u67E5\uFF1A

\u771F\u5B9E\u7269\u7406\u8DEF\u5F84\u89E3\u6790\uFF1A\u5BF9\u4E8E\u4EFB\u4F55\u76F8\u5BF9\u8DEF\u5F84\u3001.. \u5411\u4E0A\u8DF3\u8DC3\u8DEF\u5F84\uFF0C\u7CFB\u7EDF\u9996\u5148\u4F7F\u7528 filepath.EvalSymlinks \u89E3\u6790\u51FA\u76EE\u6807\u5728\u64CD\u4F5C\u7CFB\u7EDF\u7684\u771F\u5B9E\u7269\u7406\u7EDD\u5BF9\u8DEF\u5F84\u3002
\u7B26\u53F7\u94FE\u63A5 (symlink) \u9003\u9038\u9632\u62A4\uFF1A\u5373\u4F7F\u767D\u540D\u5355\u76EE\u5F55\u5185\u521B\u5EFA\u4E86\u6307\u5411\u7CFB\u7EDF\u6839\u76EE\u5F55\u7684\u8F6F\u94FE\u63A5\uFF0C\u8DEF\u5F84\u6821\u9A8C\u4E5F\u4F1A\u76F4\u63A5\u6293\u53D6\u94FE\u63A5\u6307\u5411\u7684\u5B9E\u9645\u76EE\u6807\uFF0C\u82E5\u5B9E\u9645\u76EE\u6807\u4E0D\u5728\u767D\u540D\u5355\u5185\uFF0C\u575A\u51B3\u62D2\u7EDD\u8BBF\u95EE\u3002
\u767D\u540D\u5355\u5916\u7269\u7406\u62D2\u7EDD\uFF1A\u4EFB\u4F55\u672A\u5305\u542B\u5728\u6388\u6743\u76EE\u5F55\u524D\u7F00\u5185\u7684\u64CD\u4F5C\uFF0C\u76F4\u63A5\u629B\u51FA\u7269\u7406\u7EA7 ACCESS_DENIED \u9519\u8BEF\uFF0C\u4E0D\u4E88\u8BFB\u53D6\u6216\u6539\u5199\u3002

2. \u654F\u611F\u8DEF\u5F84\u4E0E\u51ED\u636E\u9632\u62A4

\u5373\u4F7F\u67D0\u4E2A\u654F\u611F\u6587\u4EF6\u78B0\u5DE7\u88AB\u653E\u7F6E\u5728\u6388\u6743\u76EE\u5F55\u5185\uFF0C\u7CFB\u7EDF\u5185\u7F6E\u7684\u786C\u7F16\u7801\u654F\u611F\u7279\u5F81\u963B\u65AD\u5668\u4E5F\u4F1A\u751F\u6548\uFF1A

\u9ED8\u8BA4\u786C\u7F16\u7801\u62E6\u622A\u7684\u654F\u611F\u5BF9\u8C61\u5305\u62EC\uFF1A

.ssh \u5BC6\u94A5\u4E0E\u914D\u7F6E\u3001.aws / .kube \u4E91\u51ED\u636E\u3001.env \u73AF\u5883\u53D8\u91CF\u914D\u7F6E\u3001\u79C1\u94A5\u6587\u4EF6 (.pem, .key)\u3001Shell \u5386\u53F2\u8BB0\u5F55 (.bash_history, .zsh_history)\u3001macOS Keychain\u3001Windows \u51ED\u636E\u7BA1\u7406\u5668\u3002

3. \u53D7\u63A7\u547D\u4EE4\u6267\u884C\u673A\u5236

\u547D\u4EE4\u6267\u884C\u662F\u9AD8\u9636\u80FD\u529B\uFF0C\u5176\u4FDD\u62A4\u7B56\u7565\u5305\u62EC\uFF1A

\u72EC\u7ACB\u5168\u5C40\u5F00\u5173\uFF1A\u7528\u6237\u672A\u5728\u5BA2\u6237\u7AEF\u9762\u677F\u663E\u5F0F\u542F\u7528\u524D\uFF0C\u547D\u4EE4\u6267\u884C API \u5904\u4E8E\u786C\u5C01\u9501\u72B6\u6001\u3002
\u7834\u574F\u6027\u6307\u4EE4\u9ED1\u540D\u5355\u62E6\u622A\uFF1A\u7CFB\u7EDF\u5185\u7F6E\u5371\u9669\u6307\u4EE4\u8FC7\u6EE4\u5F15\u64CE\uFF0C\u5BF9\u683C\u5F0F\u5316\u78C1\u76D8\u3001\u5220\u9664\u64CD\u4F5C\u7CFB\u7EDF\u5173\u952E\u7CFB\u7EDF\u76EE\u5F55 (rm -rf /, del /f /s /q C:\\)\u3001\u5173\u673A\u3001\u91CD\u542F\u7B49\u547D\u4EE4\u76F4\u63A5\u62E6\u622A\u3002
\u64CD\u4F5C\u7CFB\u7EDF\u6743\u9650\u7EA6\u675F\uFF1A\u547D\u4EE4\u6C38\u8FDC\u53EA\u80FD\u4EE5\u5F53\u524D\u7535\u8111\u767B\u5F55\u7684\u666E\u901A\u7528\u6237\u6743\u9650\u6267\u884C\uFF0C\u4E0D\u4F1A\u63D0\u5347\u81F3 root \u6216 Administrator \u6743\u9650\u3002

4. \u5B89\u5168\u8FB9\u754C\u660E\u786E\u58F0\u660E

\u7279\u522B\u58F0\u660E

AI \u7F51\u9875\u901A\u4E0D\u662F\u64CD\u4F5C\u7CFB\u7EDF\u7EA7\u5B8C\u5168\u9694\u79BB\u6C99\u7BB1\u3002 \u5B83\u901A\u8FC7\u767D\u540D\u5355\u4E0E\u5E94\u7528\u7EA7\u5B89\u5168\u62A4\u680F\u9650\u5236 AI \u7684\u884C\u4E3A\uFF0C\u4F46\u65E0\u6CD5\u66FF\u4EE3\u64CD\u4F5C\u7CFB\u7EDF\u672C\u8EAB\u7684\u5B89\u5168\u7B56\u7565\u3002\u8BF7\u52A1\u5FC5\u9075\u5B88\u6700\u5C0F\u6743\u9650\u539F\u5219\uFF0C\u4E0D\u8981\u5728\u751F\u4EA7\u4E3B\u670D\u52A1\u5668\u4E0A\u5F00\u653E\u5305\u542B\u5173\u952E\u8D44\u4EA7\u7684\u76EE\u5F55\u3002

5. \u8EAB\u4EFD\u8BA4\u8BC1\u4E0E\u8BBE\u5907\u7ED1\u5B9A

\u8FDE\u63A5\u94FE\u8DEF\u4E0A\u62E5\u6709\u5B8C\u6574\u7684\u8EAB\u4EFD\u9632\u4F2A\u9020\u4FDD\u62A4\uFF1A

\u8BBE\u5907\u552F\u4E00\u6307\u7EB9\u7ED1\u5B9A\uFF1A\u6BCF\u4E2A\u5BA2\u6237\u7AEF\u5728\u9996\u6B21\u6FC0\u6D3B\u65F6\u751F\u6210\u552F\u4E00\u7684\u8BBE\u5907\u5BC6\u94A5\u5BF9\uFF0C\u4E2D\u8F6C\u7F51\u7EDC\u4E0E\u672C\u5730\u5B88\u62A4\u8FDB\u7A0B\u4E4B\u95F4\u901A\u8FC7\u52A0\u5BC6\u9274\u6743\u901A\u4FE1\u3002
\u9632\u6B62\u672A\u6388\u6743\u7A9C\u8FDE\uFF1A\u5916\u90E8\u4EBA\u5458\u5373\u4F7F\u63A2\u6D4B\u5230\u4E2D\u8F6C\u5730\u5740\uFF0C\u7531\u4E8E\u7F3A\u5C11\u6B63\u786E\u7684\u6388\u6743\u51ED\u636E\u4E0E\u7528\u6237\u9A8C\u8BC1\uFF0C\u65E0\u6CD5\u5411\u4F60\u7684\u7535\u8111\u53D1\u9001\u4EFB\u4F55\u6307\u4EE4\u3002

6. \u672C\u5730\u5BA1\u8BA1\u65E5\u5FD7

\u6240\u6709\u7ECF\u8FC7\u5BA2\u6237\u7AEF\u5904\u7406\u7684\u52A8\u4F5C\u5747\u5199\u5165\u672C\u5730\u65E5\u5FD7\u6587\u4EF6\uFF0C\u8BB0\u5F55\u5185\u5BB9\u5305\u62EC\uFF1A

[2026-10-04 15:32:01] TOOL: read_file
TARGET: /Users/me/Projects/App/main.go
STATUS: ALLOWED
DURATION: 1.2ms

[2026-10-04 15:33:14] TOOL: read_file
TARGET: /Users/me/.ssh/id_ed25519
STATUS: BLOCKED (Rule: Sensitive Path Match)
DURATION: 0.4ms

\u7528\u6237\u53EF\u968F\u65F6\u5728\u9762\u677F\u4E2D\u70B9\u51FB\u300C\u67E5\u770B\u65E5\u5FD7\u300D\u5BA1\u8BA1 AI \u7684\u5386\u53F2\u6240\u6709\u64CD\u4F5C\u3002