Skip to content

privacy-and-redaction.md

Latest commit

 

History

History
44 lines (29 loc) · 1.69 KB

privacy-and-redaction.md

File metadata and controls

44 lines (29 loc) · 1.69 KB
Raw

Privacy And Redaction

脱敏是 P0 发布阻断项。只要脱敏失败，就不要 publish、push、package 或分享仓库。

Redaction is a P0 release gate. If redaction fails, do not publish, push, package, or share the repository.

Never Publish / 永远不要公开

  • provider API keys, cookies, sessions, tokens, app IDs, app secrets, or webhook URLs
  • private bot names, group names, direct-message identities, or internal adapter names
  • customer, supplier, employee, partner, or service-provider identities
  • real profit, ad spend, ROI, inventory, orders, logistics, or compliance files
  • platform backend screenshots, raw chats, transcripts, exports, or URLs with private parameters
  • local absolute paths that reveal a person, machine, or private project

中文确认：不要公开密钥、cookie、session、webhook、真实 bot 名、群名、私聊对象、客户/供应商/员工/合作方、真实经营数据、后台截图、原始聊天、转写原文、带私有参数的 URL、本机绝对路径。

Allowed Placeholders / 允许的占位符

统一使用这些假值，不要临时编造像真实凭证的字符串：

Use these placeholders consistently:

  • YOUR_API_KEY
  • example.com
  • sample-project
  • example-business
  • message-platform
  • capture-bot
  • query-bot

Required Gate / 必跑闸门

发布前必须运行：

Run this before release:

python tools\redaction_check.py

这个脚本故意偏保守。它拦住发布时，先删除风险内容或替换成安全占位符，再重新检查。

The script is intentionally conservative. If it blocks a release, remove the risky content or replace it with a safe placeholder, then rerun the check.