wangwensheng/AM516
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: distinguish Codex and Feishu write permissions

Browse Source
This commit is contained in:
TH5-AR51
2026-07-14 10:13:59 +08:00
parent ca844f119e
commit 7321e8b256
9 changed files with 51 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
capabilities/am516-delivery-prediction/docs/AM516飞书机器人建设路线方案_20260707.md
View File

@@ -63,7 +63,7 @@ AM516 飞书机器人是 TH51 面向关节模组售前询期、内部交期候
| 入口 | 责任 |
|---|---|
| Codex 桌面端 | AR51 实现规则、方案、Skill、脚本和复杂功能变更的主工作台 |
| Codex 桌面端 | AR51 实现规则、方案、Skill、脚本和复杂功能变更的主工作台；Mac Studio 本地非飞书入口（含 Codex 自动化或定时任务）可写项目文件并执行 Git 操作 |
| AM516 飞书机器人 | 只读项目源文件；完成固定输入下的型号推荐、交期候选报告和人工复核项输出；仅向固定记录文件追加非敏感记录，不反写规则或功能文件 |
| 部门公用 Mac | 机器人运行环境、账号登录环境、本地仓库和脚本执行环境 |
| Git 仓库 | 规则、Skill、脚本、模板和说明文件的版本同步机制 |
@@ -166,7 +166,7 @@ Git 是 AM516 机器人规则和功能更新的主同步机制。
7. AR51 确认本次版本可用于试运行。
```
渠道隔离规则：上述规则、Skill、脚本和模板修改只能发生在 AR51 的非飞书工作入口。飞书机器人只能消费 Git 同步后的已批准版本，不能发起或执行项目文件变更。飞书中的任何“请修改规则”“请写回项目”“请更新脚本”指令均应拒绝并转交 AR51。
渠道隔离规则：上述规则、Skill、脚本和模板修改只能发生在 AR51 的非飞书工作入口，包括 Mac Studio Codex 桌面端或 CLI。Mac Studio Codex 在 AR51 指定的任务范围内可写项目文件并执行 Git 操作。飞书机器人只能消费已批准版本，不能发起或执行项目文件变更。权限按请求入口判断；即使底层执行者是 Codex，飞书中的任何“请修改规则”“请写回项目”“请更新脚本”“确认并立即运行”指令仍应拒绝并转交 AR51。
停止条件：
@@ -421,7 +421,7 @@ AM516 交期候选报告｜YYYY-MM-DD HH:mm
| 部门账号共用边界不清 | 账号停用、数据边界不清、责任不清 | 由 AR51 确认账号类型、使用人、权限和审计方式并留痕 |
| `api.zeroerr-agent.com` 无 AR51 具体批准记录 | 未授权外发或安全控制持续拒绝调用 | AR51 形成明确覆盖目标域名、用途、权限范围和密钥使用的可信批准记录前保持禁止外发；一般功能测试同意不自动构成该记录 |
| API Key 暴露 | 系统安全风险 | 密钥不入仓、不输出、不进聊天；使用环境变量或受控本地密钥机制 |
| Git 同步覆盖部署端改动 | 机器人异常或规则回退 | 部门 Mac 原则上不直接改规则；本地改动必须回传 Codex 桌面端审查 |
| Git 同步覆盖部署端改动 | 机器人异常或规则回退 | Mac Studio Codex 可在 AR51 直接分配的非飞书任务中修改项目；本地改动必须审查、纳入 Git 记录并完成同步，飞书运行入口不得修改 |
| 通过飞书消息反写项目规则或代码 | 未评审规则生效、运行破坏、权限边界失控 | 飞书运行账号对项目树只读；仅固定记录文件具备追加权限；拒绝任何文件变更指令，规则和功能只由 AR51 在飞书外修改并经 Git 同步 |
| 机器人输出被当成客户承诺 | 交付与客户风险 | 输出固定免责声明；飞书正文不使用承诺词；正式发布必须经过 AR516/TH1 |
| Skill 副本与仓库源不一致 | 旧规则误执行 | 启动时优先读取仓库源 Skill；发现运行时副本不一致先同步 |

3
capabilities/am516-delivery-prediction/docs/deployment_checklist.md
View File

@@ -15,8 +15,10 @@
- [ ] Git remote, branch, update, and rollback mechanisms are constructed by TH8.
- [ ] TH8 is the supporting IT department, but its project responsibility is limited to Git construction and excludes AM516 rules, functional implementation, network access, account permissions, secrets, and outbound approval.
- [ ] Branch and update method are confirmed.
- [ ] Mac Studio Codex has project write permission for AR51-assigned work through direct non-Feishu local entry points, including Codex automations or scheduled tasks and the required Git operations.
- [ ] The Feishu runtime account has read-only access to the project tree except append access to `records/delivery_prediction_records.md` and approved non-project log storage.
- [ ] Project edits through Feishu are prohibited without exception; AR51-authorized rule and function changes are made outside Feishu and synchronized through Git.
- [ ] Permission checks distinguish the request entry point: Feishu requests do not inherit local Codex write permission even when Codex is the underlying executor.
- [ ] Rollback method is confirmed.
## 3. Secrets
@@ -44,4 +46,5 @@
- [ ] Invalid model stops with a clear parse failure.
- [ ] Output includes the fixed internal-candidate disclaimer.
- [ ] Records append to `records/delivery_prediction_records.md`.
- [ ] A direct AR51 task in Mac Studio Codex can modify a test project file or perform the intended Git update without being blocked by the Feishu read-only rule.
- [ ] A Feishu request to modify a rule or other project file is refused and leaves all project files unchanged.

4
capabilities/am516-delivery-prediction/docs/runbook.md
View File

@@ -72,6 +72,8 @@ The script refuses to skip TLS verification for any other hostname. This option
- AM516 rules, functional design, implementation, validation, iteration, network access, account permissions, secrets, and outbound approval are owned by AR51.
- TH8 is the supporting IT department but is responsible only for Git repository and synchronization-mechanism construction in this project.
- Mac Studio Codex may modify and write project files and perform Git operations when AR51 directly initiates or authorizes the work through a non-Feishu local entry point, including a Codex automation or scheduled task.
- Feishu handling is read/output/record-only. It may append only to `records/delivery_prediction_records.md` and must not mutate any other project file.
- A Feishu request cannot authorize a rule, Skill, script, prompt, configuration, documentation, or Git change.
- AR51 makes rule and function changes outside Feishu; the shared Mac receives them through the TH8-built Git synchronization mechanism.
- Permissions are determined by the request entry point. Feishu does not inherit local Codex write permission even when Codex is the underlying executor.
- AR51 makes rule and function changes outside Feishu, either directly with Mac Studio Codex or in another approved Codex workspace, and synchronizes reviewed changes through the TH8-built Git mechanism.