mirror of
https://git.openapi.site/https://github.com/desirecore/agent-desirecore.git
synced 2026-02-28 13:38:32 +08:00
105 lines
3.4 KiB
YAML
105 lines
3.4 KiB
YAML
# 受保护路径配置
|
||
# 此配置由元技能（update-agent, delete-agent, self-evolve）共享
|
||
# 定义了不可被自动修改的敏感路径
|
||
# 注意：create-agent 通过 HTTP API 创建，不直接操作文件，因此不受此配置约束
|
||
|
||
version: 2
|
||
|
||
# 保护级别定义
|
||
protection_levels:
|
||
block:
|
||
description: 完全阻断，不可通过技能修改
|
||
requires: manual_edit
|
||
owner_only:
|
||
description: 需要 owner 角色显式确认
|
||
requires: owner_confirmation
|
||
confirm:
|
||
description: 需要用户确认
|
||
requires: user_confirmation
|
||
|
||
# 受保护路径列表（AgentFS v2 扁平结构）
|
||
protected_paths:
|
||
|
||
# ============================================
|
||
# 核心身份（不可自动修改）
|
||
# ============================================
|
||
- path: "persona.md"
|
||
section: "L0"
|
||
protection: block
|
||
reason: "核心身份定义，不可被对话或进化改变"
|
||
description: "L0 部分包含 Agent 的核心身份定义，是人格的根基"
|
||
|
||
# ============================================
|
||
# 安全红线（不可自动修改）
|
||
# ============================================
|
||
- path: "principles.md"
|
||
section: "绝不做"
|
||
protection: block
|
||
reason: "安全边界，必须由人类显式修改"
|
||
description: "绝不做部分定义了不可逾越的安全红线"
|
||
|
||
# ============================================
|
||
# 权限配置（需 owner 确认）
|
||
# ============================================
|
||
- path: "agent.json"
|
||
section: "access_control"
|
||
protection: owner_only
|
||
reason: "权限配置敏感，需 owner 审批"
|
||
description: "访问控制配置影响整个 Agent 的权限体系"
|
||
|
||
- path: "agent.json"
|
||
section: "privacy"
|
||
protection: owner_only
|
||
reason: "隐私配置敏感，需 owner 审批"
|
||
description: "隐私配置影响数据处理和共享策略"
|
||
|
||
# ============================================
|
||
# 工具权限（需 owner 确认）
|
||
# ============================================
|
||
- path: "tools/"
|
||
pattern: "**/permissions.yaml"
|
||
protection: owner_only
|
||
reason: "工具权限敏感，需 owner 审批"
|
||
description: "工具权限决定 Agent 可执行的操作范围"
|
||
|
||
- path: "tools/"
|
||
pattern: "**/credentials.yaml"
|
||
protection: block
|
||
reason: "凭证文件不可通过技能修改"
|
||
description: "凭证文件包含敏感信息，必须手动管理"
|
||
|
||
# ============================================
|
||
# 用户隐私（需用户本人确认）
|
||
# ============================================
|
||
- path: "~/.desirecore/users/*/privacy.md"
|
||
protection: owner_only
|
||
reason: "隐私设置需用户本人或 owner 修改"
|
||
description: "用户隐私边界配置"
|
||
|
||
- path: "~/.desirecore/users/*/agents/*/relationship.md"
|
||
section: "禁区"
|
||
protection: confirm
|
||
reason: "关系禁区需用户确认"
|
||
description: "用户定义的交互禁区"
|
||
|
||
# 验证规则
|
||
validation:
|
||
# 在应用变更前必须检查是否触及受保护路径
|
||
pre_change_check: true
|
||
# 触及受保护路径时的默认行为
|
||
default_action: block_and_notify
|
||
# 是否记录所有受保护路径访问尝试
|
||
audit_access_attempts: true
|
||
|
||
# 例外规则（谨慎使用）
|
||
exceptions:
|
||
# 系统初始化时可以写入所有路径
|
||
- context: system_initialization
|
||
paths: ["*"]
|
||
allowed_operations: [create]
|
||
|
||
# owner 可以在显式确认后修改 owner_only 路径
|
||
- context: owner_explicit_confirmation
|
||
paths: ["owner_only"]
|
||
allowed_operations: [update]
|