{"id":85151,"date":"2026-07-27T01:56:25","date_gmt":"2026-07-26T17:56:25","guid":{"rendered":"https:\/\/www.wsisp.com\/helps\/85151.html"},"modified":"2026-07-27T01:56:25","modified_gmt":"2026-07-26T17:56:25","slug":"%e3%80%8aai-%e6%89%a7%e8%a1%8c%e5%b7%a5%e7%a8%8b%e8%ae%ba%e7%ba%b2%e3%80%8b%e5%85%a8%e6%96%87%e7%89%88","status":"publish","type":"post","link":"https:\/\/www.wsisp.com\/helps\/85151.html","title":{"rendered":"\u300aAI \u6267\u884c\u5de5\u7a0b\u8bba\u7eb2\u300b\u5168\u6587\u7248"},"content":{"rendered":"<h2>AI \u6267\u884c\u5de5\u7a0b\u8bba\u7eb2<\/h2>\n<h3>Theses on AI Execution Engineering<\/h3>\n<hr \/>\n<p>\u7248\u672c 1.0\u3000&#xff5c;\u30002026 \u5e74 7 \u6708\u3000&#xff5c;\u3000Havenlon Labs\u3000&#xff5c;\u3000\u6210\u90fd\u6d77\u6587\u9686\u5b89\u5168\u79d1\u6280\u6709\u9650\u516c\u53f8<\/p>\n<hr \/>\n<p>\u672c\u4e66\u63d0\u51fa\u4e00\u95e8\u5c1a\u672a\u6210\u7acb\u7684\u5de5\u7a0b\u5b66\u7684\u5341\u6761\u516c\u7406\u3001\u82e5\u5e72\u5b9a\u4e49\u4e0e\u547d\u9898\u3002<\/p>\n<p>\u8fd9\u4e9b\u7406\u8bba\u5e76\u975e\u6765\u81ea\u7eaf\u7cb9\u62bd\u8c61\u63a8\u6f14&#xff0c;\u800c\u662f\u4ece\u8fd1\u4e24\u5e74\u7684\u8f6f\u4ef6\u3001\u534f\u8bae\u3001Runtime\u3001Evidence \u4e0e\u786c\u4ef6\u8fb9\u754c\u5b9e\u8df5\u4e2d\u9010\u6b65\u603b\u7ed3\u51fa\u6765\u7684\u3002<\/p>\n<p>\u5b83\u9762\u5411\u8bc4\u5224\u800c\u975e\u63a5\u53d7&#xff1a;\u6307\u51fa\u67d0\u6761\u516c\u7406\u4e0d\u5fc5\u8981&#xff0c;\u6216\u6307\u51fa\u4e00\u4e2a\u8fdd\u53cd\u5b83\u800c\u4ecd\u7136\u6210\u7acb\u7684\u7cfb\u7edf&#xff0c;\u90fd\u662f\u5bf9\u672c\u4e66\u7684\u6709\u6548\u53cd\u9a73\u3002<\/p>\n<hr \/>\n<h2>\u76ee\u5f55<\/h2>\n<p>\u5e8f\u8a00\u3000\u4e00\u95e8\u5c1a\u672a\u5b58\u5728\u7684\u5de5\u7a0b\u5b66<\/p>\n<p>\u7b2c 0 \u7ae0\u3000\u672f\u8bed\u3001\u7b26\u53f7\u4e0e\u9605\u8bfb\u7ea6\u5b9a<\/p>\n<p>0.1 \u8bba\u65ad\u7c7b\u578b\u4e0e\u7f16\u53f7\u7ea6\u5b9a \u3000\u30000.2 \u7b26\u53f7\u8868 \u3000\u30000.3 \u672f\u8bed\u8868<\/p>\n<p>\u7b2c 1 \u7ae0\u3000\u6267\u884c\u7f1d\u9699 Execution Gap<\/p>\n<p>1.1 \u4f20\u7edf\u5b89\u5168\u7684\u4fdd\u62a4\u57df&#xff1a;\u8282\u70b9\u800c\u975e\u8def\u5f84 \u3000\u30001.2 AI \u5f15\u5165\u7684\u7ed3\u6784\u6027\u53d8\u5316 \u3000\u30001.3 \u6267\u884c\u7f1d\u9699\u7684\u5b9a\u4e49\u4e0e\u6210\u56e0 \u3000\u30001.4 \u4e0e\u76f8\u90bb\u5b66\u79d1\u7684\u8fb9\u754c \u3000\u30001.5 \u672c\u7ae0\u547d\u9898\u5c0f\u7ed3<\/p>\n<p>\u7b2c 2 \u7ae0\u3000\u6267\u884c\u63a7\u5236 Execution Control<\/p>\n<p>2.1 \u5224\u5b9a\u51fd\u6570\u4e0e\u63a7\u5236\u94fe \u3000\u30002.2 \u610f\u56fe\u7ed1\u5b9a Intent Binding \u3000\u30002.3 \u6700\u7ec8\u5426\u51b3\u6743&#xff08;Final Veto&#xff09; \u3000\u30002.4 \u7269\u7406\u4fe1\u4efb\u8fb9\u754c \u3000\u30002.5 \u8bc1\u636e\u4e0e\u5224\u5b9a\u8bc1\u660e \u3000\u30002.6 \u516c\u7406\u4f53\u7cfb&#xff08;A1\u2013A10&#xff09;<\/p>\n<p>\u7b2c 3 \u7ae0\u3000\u5bf9\u6297\u6027\u5b8c\u6574 Adversarial Completeness<\/p>\n<p>3.1 \u5b8c\u6574\u6027\u547d\u9898 \u3000\u30003.2 \u5a01\u80c1\u5206\u7c7b\u5b66 EX-STRIDE \u3000\u30003.3 \u56db\u6001\u8bed\u4e49\u4e0e\u72b6\u6001\u673a \u3000\u30003.4 \u4fdd\u5b88\u9ed8\u8ba4\u4e0e Fail Secure \u3000\u30003.5 \u9a8c\u8bc1\u65b9\u6cd5\u4e0e\u6b8b\u4f59\u98ce\u9669<\/p>\n<p>\u7b2c 4 \u7ae0\u3000EBL \u6267\u884c\u8fb9\u754c\u8bed\u8a00<\/p>\n<p>4.1 \u73b0\u6709\u8868\u8fbe\u5f62\u5f0f\u7684\u4e0d\u8db3 \u3000\u30004.2 \u6267\u884c\u8fb9\u754c\u7684\u6027\u8d28 \u3000\u30004.3 Constitution \u3000\u30004.4 Runtime \u3000\u30004.5 Evidence \u4e0e Proof \u3000\u30004.6 \u6700\u5c0f\u7406\u8bba\u6a21\u578b\u4e0e\u975e\u76ee\u6807<\/p>\n<p>\u9644\u5f55<\/p>\n<p>\u9644\u5f55 A\u3000\u7aef\u5230\u7aef\u6848\u4f8b\u63a8\u6f14<\/p>\n<p>A.1 \u573a\u666f\u4e0e\u610f\u56fe\u5bf9\u8c61 \u3000\u3000A.2 \u5019\u9009\u6267\u884c \u3000\u3000A.3 EBL \u7b56\u7565\u4e0e AST \u3000\u3000A.4 \u7b2c\u4e00\u6b21\u88c1\u51b3&#xff1a;EXPIRED \u3000\u3000A.5 Fail Secure \u3000\u3000A.6 \u8bc1\u636e\u66f4\u65b0\u4e0e\u7b2c\u4e8c\u6b21\u88c1\u51b3 \u3000\u3000A.7 \u786c\u4ef6\u8fb9\u754c\u4e0e\u6267\u884c \u3000\u3000A.8 \u6848\u4f8b\u7ed3\u8bba<\/p>\n<p>\u9644\u5f55 B\u3000\u53c2\u8003\u67b6\u6784\u4e0e\u786c\u4ef6\u8fb9\u754c<\/p>\n<p>B.1 \u5206\u5c42\u53c2\u8003\u67b6\u6784 \u3000\u3000B.2 TEE \u4e0e\u72ec\u7acb MCU \u3000\u3000B.3 \u5e26\u5916\u786e\u8ba4\u4e0e\u663e\u793a\u7ed1\u5b9a \u3000\u3000B.4 \u56fa\u4ef6\u9501\u4e0e\u5e95\u7ebf\u56fa\u5316 \u3000\u3000B.5 \u8fb9\u754c\u4e0d\u662f\u5355\u4e2a\u82af\u7247<\/p>\n<p>\u9644\u5f55 C\u3000\u516c\u7406\u7d22\u5f15\u30fb\u5b9a\u4e49\u7d22\u5f15\u30fb\u5931\u8d25\u77e9\u9635<\/p>\n<p>C.1 \u516c\u7406\u7d22\u5f15 \u3000\u3000C.2 \u5b9a\u4e49\u7d22\u5f15 \u3000\u3000C.3 \u5931\u8d25\u77e9\u9635<\/p>\n<hr \/>\n<h2>\u56fe\u8868\u7d22\u5f15<\/h2>\n<h3>\u56fe<\/h3>\n<p>\u56fe 1-1\u3000\u6267\u884c\u94fe\u4e0a\u7684\u4e03\u5904\u5173\u7cfb\u65ad\u88c2<\/p>\n<p>\u56fe 2-1\u3000\u4ece\u610f\u56fe\u5230\u73b0\u5b9e\u7684\u63a7\u5236\u94fe<\/p>\n<p>\u56fe 2-2\u3000\u610f\u56fe\u7ed1\u5b9a\u7684\u9a8c\u8bc1\u5173\u7cfb<\/p>\n<p>\u56fe 2-3\u3000\u6267\u884c\u63a7\u5236\u7684\u5206\u5c42\u4e0e\u80fd\u529b\u5f52\u5c5e<\/p>\n<p>\u56fe 2-4\u3000\u5224\u5b9a\u8bc1\u660e\u7684\u7ed3\u6784<\/p>\n<p>\u56fe 3-1\u3000\u8bc1\u636e\u72b6\u6001\u8f6c\u79fb<\/p>\n<p>\u56fe 4-1\u3000\u8fb9\u754c\u7684\u5355\u5411\u6027<\/p>\n<p>\u56fe 4-2\u3000Runtime \u7684\u8f93\u5165\u5c01\u95ed\u4e0e\u8f93\u51fa\u7ed3\u6784<\/p>\n<p>\u56fe 4-3\u3000EBL \u7684\u516d\u7c7b\u5bf9\u8c61<\/p>\n<p>\u56fe B-1\u3000\u6267\u884c\u8fb9\u754c\u7684\u5206\u5c42\u53c2\u8003\u67b6\u6784<\/p>\n<h3>\u8868<\/h3>\n<p>\u8868 0-1\u3000\u5168\u4e66\u7b26\u53f7\u7ea6\u5b9a<\/p>\n<p>\u8868 1-1\u3000\u4f20\u7edf\u5b89\u5168\u673a\u5236\u7684\u4fdd\u62a4\u57df<\/p>\n<p>\u8868 1-2\u3000AI \u7cfb\u7edf\u5bf9\u6267\u884c\u94fe\u5404\u7ef4\u5ea6\u7684\u6269\u5f20<\/p>\n<p>\u8868 1-3\u3000\u76f8\u90bb\u9886\u57df\u7684\u4fdd\u62a4\u57df\u4e0e\u8986\u76d6\u8fb9\u754c<\/p>\n<p>\u8868 2-1\u3000\u6267\u884c\u63a7\u5236\u4e0e\u4e09\u7c7b\u65e2\u6709\u673a\u5236\u7684\u5224\u5b9a\u5c5e\u6027<\/p>\n<p>\u8868 2-2\u3000\u63a7\u5236\u94fe\u7684\u4e94\u9879\u5224\u5b9a\u4e49\u52a1<\/p>\n<p>\u8868 2-4\u3000\u4e09\u7c7b\u4f20\u7edf\u673a\u5236\u4e0e Final Veto \u7684\u5224\u5b9a\u5c5e\u6027\u5bf9\u6bd4<\/p>\n<p>\u8868 2-3\u3000\u8bc1\u636e\u4e0e\u65e5\u5fd7\u7684\u89d2\u8272\u533a\u522b<\/p>\n<p>\u8868 2-5\u3000\u516c\u7406\u7684\u5c42\u6b21\u7ed3\u6784<\/p>\n<p>\u8868 3-1\u3000\u5b89\u5168\u547d\u9898\u793a\u4f8b<\/p>\n<p>\u8868 3-2\u3000EX-STRIDE \u5a01\u80c1\u5206\u7c7b\u77e9\u9635<\/p>\n<p>\u8868 3-3\u3000\u56db\u6001\u5bf9\u5e94\u7684\u5904\u7f6e\u5dee\u5f02<\/p>\n<p>\u8868 3-4\u3000\u8bef\u62d2\u7edd\u4e0e\u8bef\u653e\u884c\u7684\u4ee3\u4ef7\u7ed3\u6784<\/p>\n<p>\u8868 4-1\u3000\u73b0\u6709\u8868\u8fbe\u5f62\u5f0f\u4e0e\u8fb9\u754c\u8bed\u8a00\u8981\u6c42\u7684\u5bf9\u7167<\/p>\n<p>\u8868 4-2\u3000EBL \u5baa\u6cd5\u6761\u6b3e\u53ca\u5176\u516c\u7406\u4f9d\u636e<\/p>\n<p>\u8868 4-3\u3000\u5224\u5b9a\u8bc1\u660e\u7684\u91cd\u653e\u5c42\u6b21<\/p>\n<p>\u8868 4-4\u3000EBL \u7684\u975e\u76ee\u6807<\/p>\n<p>\u8868 C-1\u3000\u516c\u7406\u901f\u67e5<\/p>\n<p>\u8868 C-2\u3000\u8bc1\u636e\u72b6\u6001\u4e0e\u6761\u4ef6\u6c42\u503c\u7ed3\u679c<\/p>\n<hr \/>\n<h2>\u5e8f\u8a00\u3000\u4e00\u95e8\u5c1a\u672a\u5b58\u5728\u7684\u5de5\u7a0b\u5b66<\/h2>\n<p>\u8fc7\u53bb\u6570\u5341\u5e74&#xff0c;\u8f6f\u4ef6\u5de5\u7a0b\u7684\u6838\u5fc3\u76ee\u6807\u662f\u8ba9\u8ba1\u7b97\u6b63\u786e\u53d1\u751f\u3002\u7f16\u7a0b\u8bed\u8a00\u3001\u7b97\u6cd5\u3001\u6570\u636e\u5e93\u3001\u7f51\u7edc\u534f\u8bae\u4e0e\u64cd\u4f5c\u7cfb\u7edf\u7684\u6f14\u8fdb&#xff0c;\u56f4\u7ed5\u7a33\u5b9a\u6027\u3001\u6548\u7387\u4e0e\u53ef\u9760\u6027\u5c55\u5f00&#xff1b;\u6784\u5efa\u4e8e\u5176\u4e0a\u7684\u5b89\u5168\u4f53\u7cfb\u2014\u2014\u8eab\u4efd\u8ba4\u8bc1\u3001\u6743\u9650\u63a7\u5236\u3001\u8bbf\u95ee\u7ba1\u7406\u3001\u52a0\u5bc6\u901a\u4fe1\u4e0e\u7cfb\u7edf\u9632\u62a4\u2014\u2014\u540c\u6837\u670d\u52a1\u4e8e\u4e00\u4e2a\u672a\u66fe\u6539\u53d8\u7684\u76ee\u6807&#xff1a;\u4fdd\u8bc1\u6570\u5b57\u4e16\u754c\u4e2d\u7684\u8ba1\u7b97\u6309\u9884\u671f\u5b8c\u6210\u3002\u8fd9\u4e00\u8303\u5f0f\u652f\u6491\u4e86\u4e92\u8054\u7f51\u65f6\u4ee3\u7684\u5168\u90e8\u57fa\u7840\u8bbe\u65bd&#xff0c;\u4e5f\u5851\u9020\u4e86\u4eca\u5929\u7edd\u5927\u591a\u6570\u4fe1\u606f\u7cfb\u7edf\u7684\u5f62\u6001\u3002<\/p>\n<p>\u8be5\u8303\u5f0f\u6210\u7acb\u7684\u9690\u542b\u524d\u63d0\u662f&#xff1a;\u8f6f\u4ef6\u63d0\u4f9b\u80fd\u529b&#xff0c;\u4eba\u7c7b\u4f5c\u51fa\u6267\u884c\u51b3\u5b9a\u3002\u65e0\u8bba\u8f6c\u8d26\u3001\u7b7e\u7f72\u5408\u540c\u3001\u542f\u52a8\u8bbe\u5907\u8fd8\u662f\u6279\u51c6\u4e1a\u52a1\u6d41\u7a0b&#xff0c;\u6700\u7ec8\u5c06\u4e00\u4e2a\u6570\u5b57\u7ed3\u8bba\u8f6c\u5316\u4e3a\u73b0\u5b9e\u52a8\u4f5c\u7684\u4e3b\u4f53\u59cb\u7ec8\u662f\u4eba\u3002\u8f6f\u4ef6\u5728\u8fd9\u6761\u8def\u5f84\u4e0a\u627f\u62c5\u8ba1\u7b97\u804c\u8d23&#xff0c;\u4e0d\u627f\u62c5\u6267\u884c\u804c\u8d23\u3002<\/p>\n<p>\u8fd9\u4e00\u524d\u63d0\u6b63\u5728\u5931\u6548\u3002\u8d8a\u6765\u8d8a\u591a\u7684 AI \u7cfb\u7edf\u4e0d\u518d\u4ec5\u751f\u6210\u5185\u5bb9&#xff0c;\u800c\u662f\u7406\u89e3\u76ee\u6807\u3001\u89c4\u5212\u4efb\u52a1\u3001\u8c03\u7528\u5de5\u5177\u3001\u7f16\u6392\u6d41\u7a0b&#xff0c;\u5e76\u901a\u8fc7\u63a5\u53e3\u4e0e\u8bbe\u5907\u5f71\u54cd\u73b0\u5b9e\u3002\u4ece\u4f01\u4e1a\u5de5\u4f5c\u6d41\u5230\u5de5\u4e1a\u63a7\u5236&#xff0c;\u4ece\u6570\u5b57\u8d44\u4ea7\u5230\u673a\u5668\u4eba\u7cfb\u7edf&#xff0c;AI \u6b63\u5728\u6210\u4e3a\u73b0\u5b9e\u6267\u884c\u94fe\u4e2d\u7684\u4e00\u4e2a\u73af\u8282&#xff0c;\u800c\u975e\u94fe\u5916\u7684\u4fe1\u606f\u5904\u7406\u5de5\u5177\u3002\u7531\u6b64&#xff0c;\u4e00\u4e2a\u6b64\u524d\u4e0d\u5fc5\u5355\u72ec\u63d0\u51fa\u7684\u95ee\u9898\u53d8\u5f97\u5fc5\u987b\u56de\u7b54&#xff1a;\u4e00\u4e2a\u6570\u5b57\u610f\u56fe&#xff0c;\u9700\u8981\u6ee1\u8db3\u54ea\u4e9b\u6761\u4ef6&#xff0c;\u624d\u6709\u8d44\u683c\u8fdb\u5165\u73b0\u5b9e\u4e16\u754c\u3002<\/p>\n<p>\u95ee\u9898\u7684\u6027\u8d28\u4e0e\u8ba1\u7b97\u6b63\u786e\u6027\u4e0d\u540c\u3002\u8ba1\u7b97\u9519\u8bef\u901a\u5e38\u8868\u73b0\u4e3a\u7a0b\u5e8f\u5d29\u6e83\u3001\u6570\u636e\u5f02\u5e38\u6216\u670d\u52a1\u4e2d\u65ad&#xff0c;\u5176\u540e\u679c\u9650\u4e8e\u6570\u5b57\u57df\u4e14\u591a\u6570\u53ef\u56de\u6eda&#xff1b;\u6267\u884c\u9519\u8bef\u5219\u8868\u73b0\u4e3a\u8d44\u91d1\u88ab\u9519\u8bef\u8f6c\u79fb\u3001\u8bbe\u5907\u88ab\u9519\u8bef\u542f\u52a8\u3001\u6743\u9650\u88ab\u9519\u8bef\u6388\u4e88&#xff0c;\u5176\u540e\u679c\u53d1\u751f\u4e8e\u73b0\u5b9e\u4e14\u5f80\u5f80\u4e0d\u53ef\u64a4\u9500\u3002\u9700\u8981\u88ab\u4fdd\u62a4\u7684\u5bf9\u8c61&#xff0c;\u56e0\u6b64\u4ece\u7a0b\u5e8f\u672c\u8eab\u6269\u5c55\u4e3a\u4ece\u610f\u56fe\u5230\u73b0\u5b9e\u7ed3\u679c\u4e4b\u95f4\u7684\u6574\u6761\u6267\u884c\u8def\u5f84\u3002<\/p>\n<p>\u4f20\u7edf\u8f6f\u4ef6\u5de5\u7a0b\u672a\u7cfb\u7edf\u56de\u7b54\u8fd9\u4e00\u95ee\u9898&#xff0c;\u4f20\u7edf\u5b89\u5168\u5de5\u7a0b\u4e5f\u672a\u56de\u7b54\u2014\u2014\u540e\u8005\u7684\u4fdd\u62a4\u57df\u662f\u8eab\u4efd\u3001\u6743\u9650\u4e0e\u8bbf\u95ee&#xff0c;\u5176\u5224\u5b9a\u5bf9\u8c61\u662f&#034;\u8c01\u53ef\u4ee5\u8bbf\u95ee\u4ec0\u4e48&#034;&#xff0c;\u800c\u975e&#034;\u8fd9\u4e00\u4e2a\u5177\u4f53\u52a8\u4f5c\u662f\u5426\u6709\u8d44\u683c\u53d1\u751f&#034;\u3002\u4e24\u8005\u4e4b\u95f4\u5b58\u5728\u4e00\u7247\u65e0\u4eba\u8ba4\u9886\u7684\u533a\u57df&#xff0c;\u672c\u4e66\u79f0\u4e4b\u4e3a\u6267\u884c\u7f1d\u9699\u3002<\/p>\n<p>\u672c\u4e66\u63d0\u51fa AI \u6267\u884c\u5de5\u7a0b&#xff08;AI Execution Engineering&#xff09; \u8fd9\u4e00\u5de5\u7a0b\u89c6\u89d2&#xff0c;\u7528\u4ee5\u5904\u7406\u8be5\u533a\u57df\u7684\u95ee\u9898\u3002\u5b83\u4e0d\u66ff\u4ee3\u8f6f\u4ef6\u5de5\u7a0b&#xff0c;\u4e5f\u4e0d\u662f\u5b89\u5168\u5de5\u7a0b\u7684\u5ef6\u4f38&#xff0c;\u5176\u5bf9\u8c61\u662f\u53e6\u4e00\u7c7b\u957f\u671f\u7f3a\u4e4f\u7cfb\u7edf\u7814\u7a76\u7684\u95ee\u9898&#xff1a;\u6570\u5b57\u7cfb\u7edf\u5982\u4f55\u5b89\u5168\u3001\u53ef\u9a8c\u8bc1\u3001\u53ef\u8ffd\u6eaf\u5730\u5f71\u54cd\u73b0\u5b9e\u4e16\u754c\u3002<\/p>\n<p>\u56f4\u7ed5\u8fd9\u4e00\u5bf9\u8c61&#xff0c;\u672c\u4e66\u5efa\u7acb\u56db\u4e2a\u76f8\u4e92\u8854\u63a5\u7684\u7406\u8bba\u90e8\u4ef6&#xff0c;\u6784\u6210\u4e00\u6761\u5b8c\u6574\u7684\u903b\u8f91\u94fe\u2014\u2014\u53d1\u73b0\u95ee\u9898&#xff0c;\u5efa\u7acb\u63a7\u5236&#xff0c;\u8bc1\u660e\u63a7\u5236\u6709\u6548&#xff0c;\u5c06\u7406\u8bba\u8f6c\u5316\u4e3a\u53ef\u8fd0\u884c\u7684\u5de5\u7a0b\u89c4\u5219&#xff1a;<\/p>\n<ul>\n<li>Execution Gap&#xff08;\u6267\u884c\u7f1d\u9699&#xff09;&#xff1a;\u754c\u5b9a\u6570\u5b57\u610f\u56fe\u8fdb\u5165\u73b0\u5b9e\u8fc7\u7a0b\u4e2d\u957f\u671f\u5b58\u5728\u800c\u672a\u88ab\u5355\u72ec\u6cbb\u7406\u7684\u98ce\u9669\u533a\u95f4\u3002<\/li>\n<li>Execution Control&#xff08;\u6267\u884c\u63a7\u5236&#xff09;&#xff1a;\u5efa\u7acb\u72ec\u7acb\u4e8e\u4e1a\u52a1\u7cfb\u7edf\u7684\u88c1\u51b3\u673a\u5236&#xff0c;\u4f7f\u73b0\u5b9e\u52a8\u4f5c\u5904\u4e8e\u53ef\u7ea6\u675f\u3001\u53ef\u8bc1\u660e\u7684\u8fb9\u754c\u4e4b\u5185\u3002<\/li>\n<li>Adversarial Completeness&#xff08;\u5bf9\u6297\u6027\u5b8c\u6574&#xff09;&#xff1a;\u5728\u6076\u610f\u653b\u51fb\u3001\u5f02\u5e38\u72b6\u6001\u4e0e\u672a\u77e5\u6761\u4ef6\u4e0b&#xff0c;\u8bba\u8bc1\u63a7\u5236\u80fd\u529b\u662f\u5426\u4ecd\u7136\u6210\u7acb\u3002<\/li>\n<li>EBL&#xff08;Execution Boundary Language&#xff09;&#xff1a;\u5c06\u4e0a\u8ff0\u7ed3\u8bba\u5f62\u5f0f\u5316\u4e3a\u53ef\u9a8c\u8bc1\u3001\u53ef\u6267\u884c\u3001\u53ef\u5ba1\u8ba1\u7684\u89c4\u5219&#xff0c;\u4f7f\u8fb9\u754c\u80fd\u591f\u88ab\u5de5\u7a0b\u5b9e\u73b0\u3002<\/li>\n<\/ul>\n<p>\u672c\u4e66\u7684\u4f53\u88c1\u662f\u8bba\u7eb2&#xff0c;\u4e0d\u662f\u5bfc\u8bba\u3002\u8fd9\u4e00\u533a\u5206\u662f\u5b9e\u8d28\u6027\u7684&#xff1a;\u5bfc\u8bba\u9762\u5411\u5df2\u7ecf\u5b58\u5728\u7684\u5b66\u79d1&#xff0c;\u4efb\u52a1\u662f\u5f15\u5bfc\u5165\u95e8&#xff1b;\u8bba\u7eb2\u9762\u5411\u5c1a\u672a\u6210\u7acb\u7684\u5b66\u79d1&#xff0c;\u4efb\u52a1\u662f\u63d0\u51fa\u4e00\u7ec4\u53ef\u88ab\u68c0\u9a8c\u3001\u4e5f\u53ef\u88ab\u63a8\u7ffb\u7684\u8d77\u70b9\u3002\u56e0\u6b64\u672c\u4e66\u7684\u5199\u6cd5\u662f\u7ed9\u51fa\u5341\u6761\u516c\u7406\u3001\u82e5\u5e72\u5b9a\u4e49\u4e0e\u547d\u9898&#xff0c;\u5e76\u660e\u786e\u6807\u6ce8\u54ea\u4e9b\u7ed3\u8bba\u662f\u63a8\u5bfc\u6240\u5f97\u3001\u54ea\u4e9b\u53ea\u662f\u5de5\u7a0b\u9009\u62e9\u3002\u8bfb\u8005\u88ab\u671f\u5f85\u7684\u59ff\u6001\u4e0d\u662f\u63a5\u53d7&#xff0c;\u800c\u662f\u8bc4\u5224\u2014\u2014\u6307\u51fa\u67d0\u6761\u516c\u7406\u4e0d\u5fc5\u8981&#xff0c;\u6216\u6307\u51fa\u67d0\u4e2a\u7cfb\u7edf\u5728\u8fdd\u53cd\u5b83\u7684\u60c5\u51b5\u4e0b\u4f9d\u7136\u6210\u7acb&#xff0c;\u90fd\u662f\u5bf9\u672c\u4e66\u7684\u6709\u6548\u53cd\u9a73\u3002<\/p>\n<p>\u4e66\u4e2d\u4e0d\u56de\u907f\u672a\u5b8c\u6210\u7684\u90e8\u5206\u3002\u8bed\u8a00\u5c1a\u9700\u8bbe\u8ba1&#xff0c;Runtime \u5c1a\u9700\u9a8c\u8bc1&#xff0c;\u786c\u4ef6\u8fb9\u754c\u5c1a\u672a\u5f62\u6210\u6807\u51c6&#xff0c;\u4e0d\u540c\u884c\u4e1a\u5c06\u4ea7\u751f\u4e0d\u540c\u5b9e\u73b0\u3002\u4f46\u95ee\u9898\u5df2\u7ecf\u51fa\u73b0&#xff0c;\u4e14\u4e0d\u4f1a\u968f\u7740\u6a21\u578b\u80fd\u529b\u63d0\u5347\u800c\u81ea\u884c\u6d88\u5931\u3002\u76f8\u53cd\u7684\u5173\u7cfb\u66f4\u63a5\u8fd1\u4e8b\u5b9e&#xff1a;AI \u8d8a\u667a\u80fd\u3001\u6267\u884c\u8d8a\u81ea\u52a8\u3001\u5de5\u5177\u8d8a\u4e30\u5bcc&#xff0c;\u73b0\u5b9e\u4e16\u754c\u8d8a\u9700\u8981\u4e00\u6761\u4e0d\u4f1a\u88ab\u667a\u80fd\u672c\u8eab\u7ed5\u8fc7\u7684\u8fb9\u754c\u3002<\/p>\n<p>\u672a\u6765\u5341\u5e74\u9700\u8981\u5efa\u7acb\u7684&#xff0c;\u4e0d\u53ea\u662f\u66f4\u5f3a\u7684\u6a21\u578b\u3001\u66f4\u597d\u7684 Agent \u4e0e\u66f4\u9ad8\u6548\u7684\u81ea\u52a8\u5316\u3002\u5728\u8fd9\u4e9b\u80fd\u529b\u4e4b\u4e0b&#xff0c;\u8fd8\u987b\u5b58\u5728\u53e6\u4e00\u5c42\u57fa\u7840\u8bbe\u65bd\u3002\u5b83\u4e0d\u8d1f\u8d23\u8ba9\u7cfb\u7edf\u505a\u66f4\u591a\u4e8b\u60c5&#xff0c;\u800c\u8d1f\u8d23\u5b88\u4f4f\u54ea\u4e9b\u4e8b\u60c5\u4ecd\u7136\u4e0d\u80fd\u53d1\u751f&#xff1b;\u5b83\u4e0d\u66ff\u4ee3\u4eba\u7684\u5224\u65ad&#xff0c;\u800c\u786e\u4fdd\u4eba\u7684\u610f\u56fe\u4e0d\u4f1a\u5728\u8fdb\u5165\u73b0\u5b9e\u4e4b\u524d\u88ab\u65e0\u58f0\u6539\u5199&#xff1b;\u5b83\u4e0d\u4f9d\u8d56\u4efb\u4f55\u6c38\u8fdc\u53ef\u4fe1\u7684\u4e3b\u4f53&#xff0c;\u800c\u8981\u6c42\u5173\u952e\u6267\u884c\u7531\u8bc1\u636e\u3001\u89c4\u5219\u4e0e\u8fb9\u754c\u5171\u540c\u8bc1\u660e\u3002<\/p>\n<p>\u8fd9\u5c31\u662f\u672c\u4e66\u6240\u8ba8\u8bba\u7684\u5de5\u7a0b\u5b66\u3002<\/p>\n<hr \/>\n<hr \/>\n<h2>\u7b2c 0 \u7ae0\u3000\u672f\u8bed\u3001\u7b26\u53f7\u4e0e\u9605\u8bfb\u7ea6\u5b9a<\/h2>\n<p>\u672c\u7ae0\u4e0d\u542b\u8bba\u8bc1&#xff0c;\u4ec5\u4f9b\u67e5\u9605\u3002\u9996\u6b21\u9605\u8bfb\u53ef\u8df3\u8fc7 0.3&#xff0c;\u5728\u6b63\u6587\u9047\u5230\u672f\u8bed\u65f6\u56de\u67e5\u3002<\/p>\n<\/p>\n<h3>0.1 \u8bba\u65ad\u7c7b\u578b\u4e0e\u7f16\u53f7\u7ea6\u5b9a<\/h3>\n<p>\u672c\u4e66\u5bf9\u6240\u6709\u72ec\u7acb\u6210\u7acb\u7684\u8bba\u65ad\u6807\u6ce8\u7c7b\u578b\u3002\u8bfb\u8005\u53ef\u636e\u6b64\u5224\u65ad\u4e00\u9879\u9648\u8ff0\u7684\u6548\u529b\u6765\u6e90&#xff0c;\u4ee5\u53ca\u53cd\u9a73\u5b83\u9700\u8981\u4ed8\u51fa\u4ec0\u4e48\u3002<\/p>\n<table>\n<tr>\u7c7b\u578b\u8bb0\u53f7\u6548\u529b\u6765\u6e90\u5982\u4f55\u53cd\u9a73<\/tr>\n<tbody>\n<tr>\n<td>\u516c\u7406<\/td>\n<td>An<\/td>\n<td>\u4e0d\u52a0\u8bc1\u660e&#xff0c;\u4f5c\u4e3a\u4f53\u7cfb\u8d77\u70b9<\/td>\n<td>\u4e3e\u51fa\u4e00\u4e2a\u8be5\u516c\u7406\u4e0d\u6210\u7acb\u800c\u6267\u884c\u63a7\u5236\u4ecd\u6210\u7acb\u7684\u7cfb\u7edf<\/td>\n<\/tr>\n<tr>\n<td>\u5b9a\u4e49<\/td>\n<td>D\u7ae0.\u5e8f<\/td>\n<td>\u7ea6\u5b9a<\/td>\n<td>\u6307\u51fa\u5b9a\u4e49\u5305\u542b\u4e0d\u53ef\u5224\u5b9a\u7684\u5c5e\u6027<\/td>\n<\/tr>\n<tr>\n<td>\u547d\u9898<\/td>\n<td>P\u7ae0.\u5e8f<\/td>\n<td>\u7531\u516c\u7406\u4e0e\u5b9a\u4e49\u63a8\u51fa<\/td>\n<td>\u6307\u51fa\u63a8\u5bfc\u7f3a\u73af<\/td>\n<\/tr>\n<tr>\n<td>\u63a8\u8bba<\/td>\n<td>C\u7ae0.\u5e8f<\/td>\n<td>\u547d\u9898\u7684\u76f4\u63a5\u7ed3\u679c<\/td>\n<td>\u540c\u4e0a<\/td>\n<\/tr>\n<tr>\n<td>\u5de5\u7a0b\u7ea6\u5b9a<\/td>\n<td>E\u7ae0.\u5e8f<\/td>\n<td>\u8bbe\u8ba1\u9009\u62e9&#xff0c;\u975e\u903b\u8f91\u5fc5\u7136<\/td>\n<td>\u63d0\u51fa\u4ee3\u4ef7\u66f4\u4f4e\u7684\u66ff\u4ee3\u9009\u62e9<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u5de5\u7a0b\u7ea6\u5b9a\u8fd9\u4e00\u7c7b\u578b\u7684\u5b58\u5728\u662f\u523b\u610f\u7684\u3002\u4e00\u95e8\u65b0\u5b66\u79d1\u6700\u6613\u72af\u7684\u9519\u8bef&#xff0c;\u662f\u628a\u81ea\u8eab\u7684\u8bbe\u8ba1\u504f\u597d\u4f2a\u88c5\u6210\u5fc5\u7136\u6027\u3002\u51e1\u672c\u4e66\u65e0\u6cd5\u4ece\u516c\u7406\u63a8\u51fa\u3001\u800c\u786e\u5b9e\u4f5c\u51fa\u4e86\u53d6\u820d\u4e4b\u5904&#xff0c;\u4e00\u5f8b\u6807\u4e3a E \u5e76\u5199\u660e\u4ee3\u4ef7\u3002<\/p>\n<p>\u5404\u7ae0\u8282\u524d\u4ee5\u5f15\u6587\u683c\u5f0f\u51fa\u73b0\u7684\u5355\u53e5\u4e3a\u9898\u8bb0&#xff0c;\u5c5e\u4fee\u8f9e\u6027\u8868\u8ff0&#xff0c;\u4e0d\u627f\u62c5\u8bba\u8bc1\u8d23\u4efb\u3002\u6b63\u6587\u4e2d\u5e26\u3014\u8865\u3015\u6807\u8bb0\u7684\u6bb5\u843d&#xff0c;\u4e3a\u539f\u59cb\u8bba\u8bc1\u4e4b\u5916\u8865\u5145\u7684\u5185\u5bb9\u3002<\/p>\n<\/p>\n<h3>0.2 \u7b26\u53f7\u8868<\/h3>\n<p>\u8868 0-1\u3000\u5168\u4e66\u7b26\u53f7\u7ea6\u5b9a<\/p>\n<table>\n<tr>\u7b26\u53f7\u8bfb\u6cd5\u542b\u4e49<\/tr>\n<tbody>\n<tr>\n<td>I<\/td>\n<td>Intent<\/td>\n<td>\u610f\u56fe\u5bf9\u8c61<\/td>\n<\/tr>\n<tr>\n<td>I.inv<\/td>\n<td>invariants<\/td>\n<td>\u610f\u56fe\u4e2d\u4e0d\u53ef\u53d8\u7684\u5173\u952e\u7ea6\u675f\u96c6\u5408<\/td>\n<\/tr>\n<tr>\n<td>x<\/td>\n<td>Candidate Execution<\/td>\n<td>\u5019\u9009\u6267\u884c\u5bf9\u8c61&#xff0c;\u8fdb\u5165\u73b0\u5b9e\u7684\u7cbe\u786e\u52a8\u4f5c<\/td>\n<\/tr>\n<tr>\n<td>P<\/td>\n<td>Policy<\/td>\n<td>\u53ef\u7f16\u7a0b\u4e1a\u52a1\u7b56\u7565\u96c6\u5408<\/td>\n<\/tr>\n<tr>\n<td>K<\/td>\n<td>Constitution<\/td>\n<td>\u56fa\u5b9a\u5b89\u5168\u5e95\u7ebf\u96c6\u5408&#xff0c;\u4e0d\u53ef\u88ab P \u5173\u95ed<\/td>\n<\/tr>\n<tr>\n<td>Ev<\/td>\n<td>Evidence Set<\/td>\n<td>\u8bc1\u636e\u96c6\u5408&#xff0c;e \u2208 Ev<\/td>\n<\/tr>\n<tr>\n<td>\u03c3(e)<\/td>\n<td>status<\/td>\n<td>\u8bc1\u636e\u72b6\u6001&#xff0c;\u503c\u57df\u89c1\u516c\u7406 A8<\/td>\n<\/tr>\n<tr>\n<td>Ctx<\/td>\n<td>Context<\/td>\n<td>\u7cfb\u7edf\u72b6\u6001\u4e0e\u73af\u5883<\/td>\n<\/tr>\n<tr>\n<td>t<\/td>\n<td>time<\/td>\n<td>\u5224\u5b9a\u65f6\u523b<\/td>\n<\/tr>\n<tr>\n<td>\u0393<\/td>\n<td>Gamma<\/td>\n<td>\u5224\u5b9a\u51fd\u6570&#xff0c;Runtime \u7684\u62bd\u8c61<\/td>\n<\/tr>\n<tr>\n<td>d<\/td>\n<td>Decision<\/td>\n<td>\u51b3\u7b56&#xff0c;d \u2208 {ALLOW, DENY, SAFE_MODE}<\/td>\n<\/tr>\n<tr>\n<td>\u03c0<\/td>\n<td>Proof<\/td>\n<td>\u5224\u5b9a\u8bc1\u660e&#xff0c;\u53ef\u91cd\u653e<\/td>\n<\/tr>\n<tr>\n<td>cap<\/td>\n<td>capability<\/td>\n<td>\u73b0\u5b9e\u52a8\u4f5c\u6240\u9700\u7684\u5fc5\u8981\u80fd\u529b<\/td>\n<\/tr>\n<tr>\n<td>\u22a8<\/td>\n<td>\u6ee1\u8db3<\/td>\n<td>Ev \u22a8 c \u8868\u793a\u8bc1\u636e\u96c6\u5408\u8bc1\u6210\u6761\u4ef6 c<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u5224\u5b9a\u51fd\u6570\u7684\u5b8c\u6574\u5f62\u5f0f&#xff1a;<\/p>\n<p>\u0393 : (I, x, P, K, Ev, Ctx, t) \u2192 (d, \u03c0)<\/p>\n<h3>0.3 \u672f\u8bed\u8868<\/h3>\n<p>\u6309\u4e3b\u9898\u5206\u7ec4\u3002\u6bcf\u6761\u7ed9\u51fa\u4e2d\u6587\u672f\u8bed\u3001\u82f1\u6587\u5bf9\u5e94\u4e0e\u5de5\u7a0b\u5b9a\u4e49\u3002\u5b9a\u4e49\u4e2d\u4e0d\u542b\u5f62\u5bb9\u8bcd\u6027\u63cf\u8ff0\u2014\u2014\u82e5\u5220\u53bb\u4fee\u9970\u540e\u5b9a\u4e49\u4e0d\u518d\u6210\u7acb&#xff0c;\u8bf4\u660e\u8be5\u5b9a\u4e49\u4f9d\u8d56\u4fee\u8f9e\u800c\u975e\u5c5e\u6027\u3002<\/p>\n<h4>\u95ee\u9898\u57df<\/h4>\n<table>\n<tr>\u672f\u8bed\u82f1\u6587\u5b9a\u4e49<\/tr>\n<tbody>\n<tr>\n<td>AI \u6267\u884c\u5de5\u7a0b<\/td>\n<td>AI Execution Engineering<\/td>\n<td>\u7814\u7a76\u6570\u5b57\u7cfb\u7edf\u5982\u4f55\u5b89\u5168\u3001\u53ef\u9a8c\u8bc1\u3001\u53ef\u8ffd\u6eaf\u5730\u5f71\u54cd\u73b0\u5b9e\u4e16\u754c\u7684\u5de5\u7a0b\u9886\u57df<\/td>\n<\/tr>\n<tr>\n<td>\u6267\u884c\u7f1d\u9699<\/td>\n<td>Execution Gap<\/td>\n<td>\u610f\u56fe\u5f62\u6210\u540e\u81f3\u73b0\u5b9e\u52a8\u4f5c\u53d1\u751f\u524d&#xff0c;\u7f3a\u4e4f\u7aef\u5230\u7aef\u8d23\u4efb\u4e3b\u4f53\u4e0e\u7edf\u4e00\u9a8c\u8bc1\u7684\u8def\u5f84\u533a\u95f4<\/td>\n<\/tr>\n<tr>\n<td>\u73b0\u5b9e\u52a8\u4f5c<\/td>\n<td>Real-World Action<\/td>\n<td>\u6548\u679c\u53d1\u751f\u4e8e\u6570\u5b57\u7cfb\u7edf\u4e4b\u5916\u3001\u4e14\u4e0d\u80fd\u7531\u7cfb\u7edf\u81ea\u8eab\u5b8c\u5168\u56de\u6eda\u7684\u52a8\u4f5c<\/td>\n<\/tr>\n<tr>\n<td>\u6267\u884c\u94fe<\/td>\n<td>Execution Chain<\/td>\n<td>\u4ece\u610f\u56fe\u4ea7\u751f\u5230\u73b0\u5b9e\u52a8\u4f5c\u53d1\u751f\u6240\u7ecf\u8fc7\u7684\u5168\u90e8\u7ec4\u4ef6\u4e0e\u8f6c\u6362\u7684\u5e8f\u5217<\/td>\n<\/tr>\n<tr>\n<td>\u8d23\u4efb\u7f3a\u5931<\/td>\n<td>Accountability Void<\/td>\n<td>\u6267\u884c\u94fe\u4e0a\u4e0d\u5b58\u5728\u5bf9\u6700\u7ec8\u7ed3\u679c\u8d1f\u7aef\u5230\u7aef\u8d23\u4efb\u7684\u5355\u4e00\u4e3b\u4f53\u7684\u72b6\u6001<\/td>\n<\/tr>\n<tr>\n<td>\u9519\u8bef\u534a\u5f84<\/td>\n<td>Blast Radius<\/td>\n<td>\u4e00\u6b21\u9519\u8bef\u6267\u884c\u6240\u5f71\u54cd\u7684\u73b0\u5b9e\u5bf9\u8c61\u6570\u91cf\u4e0e\u4e0d\u53ef\u64a4\u9500\u7a0b\u5ea6<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h4>\u63a7\u5236\u673a\u5236<\/h4>\n<table>\n<tr>\u672f\u8bed\u82f1\u6587\u5b9a\u4e49<\/tr>\n<tbody>\n<tr>\n<td>\u6267\u884c\u63a7\u5236<\/td>\n<td>Execution Control<\/td>\n<td>\u5728\u73b0\u5b9e\u52a8\u4f5c\u53d1\u751f\u524d&#xff0c;\u5bf9\u610f\u56fe\u3001\u6700\u7ec8\u6267\u884c\u5bf9\u8c61\u3001\u6761\u4ef6\u3001\u8bc1\u636e\u53ca\u5176\u7ed1\u5b9a\u5173\u7cfb\u8fdb\u884c\u72ec\u7acb\u88c1\u51b3&#xff0c;\u4ec5\u5728\u5b8c\u6574\u6761\u4ef6\u88ab\u8bc1\u660e\u6210\u7acb\u65f6\u91ca\u653e\u6267\u884c\u80fd\u529b\u7684\u673a\u5236&#xff08;D2.1.1&#xff09;<\/td>\n<\/tr>\n<tr>\n<td>\u610f\u56fe<\/td>\n<td>Intent<\/td>\n<td>\u8868\u8fbe\u671f\u671b\u53d1\u751f\u4ec0\u4e48\u3001\u5e76\u643a\u5e26\u4e0d\u53ef\u53d8\u7ea6\u675f\u96c6 I.inv \u7684\u53ef\u9a8c\u8bc1\u5bf9\u8c61<\/td>\n<\/tr>\n<tr>\n<td>\u5019\u9009\u6267\u884c<\/td>\n<td>Candidate Execution<\/td>\n<td>\u5df2\u5b8c\u5168\u5177\u5316\u3001\u5c1a\u672a\u83b7\u5f97\u8de8\u8d8a\u8fb9\u754c\u80fd\u529b\u7684\u7cbe\u786e\u52a8\u4f5c\u5bf9\u8c61<\/td>\n<\/tr>\n<tr>\n<td>\u610f\u56fe\u7ed1\u5b9a<\/td>\n<td>Intent Binding<\/td>\n<td>\u5019\u9009\u6267\u884c\u4e0e\u539f\u59cb\u610f\u56fe\u4e0d\u53ef\u53d8\u7ea6\u675f\u4e4b\u95f4\u7684\u53ef\u9a8c\u8bc1\u5bf9\u5e94\u5173\u7cfb<\/td>\n<\/tr>\n<tr>\n<td>\u6700\u7ec8\u5426\u51b3\u6743<\/td>\n<td>Final Veto<\/td>\n<td>\u7531\u72ec\u7acb\u4e8e\u5019\u9009\u6267\u884c\u751f\u6210\u65b9\u7684\u7ec4\u4ef6\u6301\u6709\u7684\u3001\u4e0d\u53ef\u7ed5\u8fc7\u4e14\u4e0d\u53ef\u88ab\u8986\u76d6\u7684\u62d2\u7edd\u80fd\u529b&#xff08;D2.3.1&#xff09;<\/td>\n<\/tr>\n<tr>\n<td>\u5224\u5b9a\u51fd\u6570<\/td>\n<td>Decision Function \u0393<\/td>\n<td>\u63a5\u6536\u610f\u56fe\u3001\u5019\u9009\u6267\u884c\u3001\u7b56\u7565\u3001\u5baa\u6cd5\u3001\u8bc1\u636e\u3001\u4e0a\u4e0b\u6587\u4e0e\u65f6\u523b&#xff0c;\u8f93\u51fa\u51b3\u7b56\u4e0e\u5224\u5b9a\u8bc1\u660e\u7684\u786e\u5b9a\u6027\u51fd\u6570<\/td>\n<\/tr>\n<tr>\n<td>\u63a7\u5236\u94fe<\/td>\n<td>Control Chain<\/td>\n<td>\u9010\u7ea7\u5efa\u7acb\u53ef\u9a8c\u8bc1\u5173\u7cfb\u800c\u975e\u9010\u7ea7\u4f20\u9012\u7ed3\u8bba\u7684\u6267\u884c\u8def\u5f84\u7ed3\u6784&#xff08;\u56fe 2-1&#xff09;<\/td>\n<\/tr>\n<tr>\n<td>\u91cd\u88c1\u51b3<\/td>\n<td>Re-adjudication<\/td>\n<td>\u56e0 x\u3001Ev \u6216 Ctx \u53d8\u5316\u800c\u4f7f\u65e2\u6709\u5224\u5b9a\u5931\u6548\u3001\u987b\u91cd\u65b0\u6c42\u503c\u7684\u8fc7\u7a0b&#xff08;A9&#xff09;<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h4>\u8fb9\u754c\u4e0e\u80fd\u529b<\/h4>\n<table>\n<tr>\u672f\u8bed\u82f1\u6587\u5b9a\u4e49<\/tr>\n<tbody>\n<tr>\n<td>\u6267\u884c\u8fb9\u754c<\/td>\n<td>Execution Boundary<\/td>\n<td>\u5019\u9009\u6267\u884c\u987b\u83b7\u5f97\u653e\u884c\u624d\u80fd\u8de8\u8d8a\u3001\u4e14\u8de8\u8d8a\u540e\u52a8\u4f5c\u5373\u8fdb\u5165\u73b0\u5b9e\u7684\u5355\u5411\u63a7\u5236\u70b9<\/td>\n<\/tr>\n<tr>\n<td>\u7269\u7406\u4fe1\u4efb\u8fb9\u754c<\/td>\n<td>Physical Trust Boundary<\/td>\n<td>\u7531\u786c\u4ef6\u72ec\u5360\u5fc5\u8981\u80fd\u529b\u6240\u6784\u6210\u3001\u4e0a\u5c42\u8f6f\u4ef6\u8d8a\u6743\u65e0\u6cd5\u7a7f\u8d8a\u7684\u6267\u884c\u8fb9\u754c<\/td>\n<\/tr>\n<tr>\n<td>\u5fc5\u8981\u80fd\u529b<\/td>\n<td>Necessary Capability cap<\/td>\n<td>\u73b0\u5b9e\u52a8\u4f5c\u53d1\u751f\u6240\u4e0d\u53ef\u7f3a\u5c11\u7684\u4e00\u9879\u80fd\u529b&#xff0c;\u8fb9\u754c\u901a\u8fc7\u72ec\u5360\u5b83\u4f7f\u5426\u51b3\u751f\u6548&#xff08;A10&#xff09;<\/td>\n<\/tr>\n<tr>\n<td>\u4fe1\u4efb\u57df<\/td>\n<td>Trust Domain<\/td>\n<td>\u5171\u4eab\u540c\u4e00\u653b\u9677\u540e\u679c\u7684\u7ec4\u4ef6\u96c6\u5408&#xff1b;\u57df\u5185\u4efb\u4e00\u7ec4\u4ef6\u88ab\u653b\u9677\u89c6\u540c\u5168\u57df\u5931\u6548<\/td>\n<\/tr>\n<tr>\n<td>\u5171\u56e0\u6545\u969c<\/td>\n<td>Common-Cause Failure<\/td>\n<td>\u56e0\u5171\u4eab\u4f9b\u7535\u3001\u65f6\u949f\u6216\u901a\u9053\u800c\u4f7f\u5224\u5b9a\u7ec4\u4ef6\u4e0e\u88ab\u5224\u5b9a\u7cfb\u7edf\u540c\u65f6\u5931\u6548\u7684\u6545\u969c\u6a21\u5f0f<\/td>\n<\/tr>\n<tr>\n<td>\u5baa\u6cd5<\/td>\n<td>Constitution K<\/td>\n<td>\u4efb\u4f55\u53ef\u7f16\u7a0b\u7b56\u7565\u90fd\u4e0d\u80fd\u5173\u95ed\u3001\u524a\u5f31\u6216\u65c1\u8def\u7684\u56fa\u5b9a\u5b89\u5168\u5e95\u7ebf\u96c6\u5408<\/td>\n<\/tr>\n<tr>\n<td>\u7b56\u7565<\/td>\n<td>Policy P<\/td>\n<td>\u8868\u8fbe\u5019\u9009\u6267\u884c\u987b\u6ee1\u8db3\u7684\u4e1a\u52a1\u6761\u4ef6\u3001\u53ef\u7531\u6388\u6743\u65b9\u4fee\u6539\u7684\u89c4\u5219\u96c6\u5408<\/td>\n<\/tr>\n<tr>\n<td>Owner \u2260 God<\/td>\n<td>\u2014<\/td>\n<td>\u7cfb\u7edf\u6240\u6709\u8005\u62e5\u6709\u914d\u7f6e\u6743\u4f46\u4e0d\u62e5\u6709\u5173\u95ed\u5e95\u7ebf\u6743\u7684\u8bbe\u8ba1\u539f\u5219<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h4>\u8bc1\u636e\u4e0e\u8bc1\u660e<\/h4>\n<table>\n<tr>\u672f\u8bed\u82f1\u6587\u5b9a\u4e49<\/tr>\n<tbody>\n<tr>\n<td>\u8bc1\u636e<\/td>\n<td>Evidence<\/td>\n<td>\u5e26\u7c7b\u578b\u3001\u6765\u6e90\u3001\u4e3b\u4f53\u7ed1\u5b9a\u4e0e\u65f6\u6548\u7684\u53ef\u9a8c\u8bc1\u4e8b\u5b9e\u5bf9\u8c61<\/td>\n<\/tr>\n<tr>\n<td>\u8bc1\u636e\u94fe<\/td>\n<td>Evidence Chain<\/td>\n<td>\u591a\u9879\u8bc1\u636e\u4e4b\u95f4\u7684\u5f15\u7528\u4e0e\u4f9d\u8d56\u5173\u7cfb\u6240\u6784\u6210\u7684\u7ed3\u6784<\/td>\n<\/tr>\n<tr>\n<td>\u8bc1\u660e\u56fe<\/td>\n<td>Proof Graph<\/td>\n<td>\u7531\u8bc1\u636e\u4e0e\u89c4\u5219\u6c42\u503c\u8282\u70b9\u6784\u6210\u3001\u7528\u4ee5\u8bc1\u6210\u67d0\u4e00\u51b3\u7b56\u7684\u6709\u5411\u56fe<\/td>\n<\/tr>\n<tr>\n<td>\u5224\u5b9a\u8bc1\u660e<\/td>\n<td>Decision Proof \u03c0<\/td>\n<td>\u8bb0\u5f55\u88c1\u51b3\u6240\u4f9d\u636e\u7684\u8bc1\u636e\u56fe\u4e0e\u89c4\u5219\u6c42\u503c\u8def\u5f84\u3001\u53ef\u88ab\u91cd\u653e\u7684\u7ed3\u6784<\/td>\n<\/tr>\n<tr>\n<td>\u6709\u6548\u671f<\/td>\n<td>Validity Window<\/td>\n<td>\u8bc1\u636e\u88ab\u89c6\u4e3a\u6210\u7acb\u7684\u65f6\u95f4\u533a\u95f4&#xff0c;\u8d85\u51fa\u540e\u72b6\u6001\u8f6c\u4e3a EXPIRED<\/td>\n<\/tr>\n<tr>\n<td>\u4e3b\u4f53\u7ed1\u5b9a<\/td>\n<td>Subject Binding<\/td>\n<td>\u8bc1\u636e\u4e0e\u5176\u6240\u63cf\u8ff0\u5bf9\u8c61\u4e4b\u95f4\u7684\u53ef\u9a8c\u8bc1\u5bf9\u5e94\u5173\u7cfb<\/td>\n<\/tr>\n<tr>\n<td>\u5173\u7cfb\u72ec\u7acb\u6027<\/td>\n<td>Relational Independence<\/td>\n<td>\u591a\u4e2a\u8bc1\u636e\u6765\u6e90\u4e4b\u95f4\u4e0d\u5b58\u5728\u5171\u540c\u4f9d\u8d56\u7684\u6027\u8d28&#xff0c;\u6784\u6210\u591a\u65b9\u8bc1\u660e\u6709\u6548\u7684\u524d\u63d0<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h4>\u5931\u8d25\u8bed\u4e49<\/h4>\n<table>\n<tr>\u672f\u8bed\u82f1\u6587\u5b9a\u4e49<\/tr>\n<tbody>\n<tr>\n<td>VALID<\/td>\n<td>\u2014<\/td>\n<td>\u8bc1\u636e\u5df2\u9a8c\u8bc1\u4e14\u5728\u6709\u6548\u671f\u5185&#xff0c;\u53ef\u53c2\u4e0e\u5224\u5b9a\u8bc1\u660e<\/td>\n<\/tr>\n<tr>\n<td>UNKNOWN<\/td>\n<td>\u2014<\/td>\n<td>\u8bc1\u636e\u5df2\u63d0\u4ea4\u4f46\u65e0\u6cd5\u9a8c\u8bc1<\/td>\n<\/tr>\n<tr>\n<td>MISSING<\/td>\n<td>\u2014<\/td>\n<td>\u5224\u5b9a\u6240\u9700\u7684\u8bc1\u636e\u672a\u63d0\u4ea4<\/td>\n<\/tr>\n<tr>\n<td>EXPIRED<\/td>\n<td>\u2014<\/td>\n<td>\u8bc1\u636e\u66fe\u6210\u7acb&#xff0c;\u5f53\u524d\u5df2\u8d85\u51fa\u6709\u6548\u671f<\/td>\n<\/tr>\n<tr>\n<td>CONFLICT<\/td>\n<td>\u2014<\/td>\n<td>\u5b58\u5728\u4e0e\u4e4b\u77db\u76fe\u7684\u540c\u7c7b\u8bc1\u636e<\/td>\n<\/tr>\n<tr>\n<td>\u5b89\u5168\u6a21\u5f0f<\/td>\n<td>Safe Mode<\/td>\n<td>\u7cfb\u7edf\u65e0\u6cd5\u5b8c\u6210\u8bc1\u660e\u65f6\u8fdb\u5165\u7684\u3001\u4ec5\u4fdd\u7559\u6700\u5c0f\u5fc5\u8981\u80fd\u529b\u7684\u964d\u7ea7\u72b6\u6001<\/td>\n<\/tr>\n<tr>\n<td>\u4fdd\u5b88\u5931\u8d25<\/td>\n<td>Fail Secure<\/td>\n<td>\u7cfb\u7edf\u5728\u6545\u969c\u6216\u4e0d\u53ef\u5224\u5b9a\u72b6\u6001\u4e0b\u9ed8\u8ba4\u4e0d\u91ca\u653e\u6267\u884c\u80fd\u529b\u7684\u67b6\u6784\u5c5e\u6027<\/td>\n<\/tr>\n<tr>\n<td>\u5f00\u653e\u5931\u8d25<\/td>\n<td>Fail Open<\/td>\n<td>\u7cfb\u7edf\u5728\u6545\u969c\u72b6\u6001\u4e0b\u9ed8\u8ba4\u653e\u884c\u7684\u67b6\u6784\u5c5e\u6027&#xff0c;\u672c\u4e66\u89c6\u4e3a\u6267\u884c\u63a7\u5236\u7684\u53cd\u6a21\u5f0f<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h4>\u8bed\u8a00\u4e0e\u8fd0\u884c\u65f6<\/h4>\n<table>\n<tr>\u672f\u8bed\u82f1\u6587\u5b9a\u4e49<\/tr>\n<tbody>\n<tr>\n<td>EBL<\/td>\n<td>Execution Boundary Language<\/td>\n<td>\u7528\u4e8e\u8868\u8fbe\u6267\u884c\u8fb9\u754c\u89c4\u5219\u7684\u9886\u57df\u8bed\u8a00&#xff0c;\u975e\u56fe\u7075\u5b8c\u5907&#xff0c;\u8868\u8fbe\u80fd\u529b\u53d7\u5baa\u6cd5\u7ea6\u675f<\/td>\n<\/tr>\n<tr>\n<td>Runtime<\/td>\n<td>Execution Boundary Runtime<\/td>\n<td>\u6267\u884c \u0393 \u7684\u786e\u5b9a\u6027\u7ec4\u4ef6&#xff0c;\u8d1f\u8d23\u88c1\u51b3\u800c\u4e0d\u8d1f\u8d23\u6267\u884c<\/td>\n<\/tr>\n<tr>\n<td>\u88c1\u51b3\u6267\u884c\u5206\u79bb<\/td>\n<td>Adjudication\u2013Execution Separation<\/td>\n<td>\u5224\u5b9a\u7ec4\u4ef6\u4e0e\u52a8\u4f5c\u6267\u884c\u7ec4\u4ef6\u4e0d\u5f97\u4e3a\u540c\u4e00\u4e3b\u4f53\u7684\u67b6\u6784\u539f\u5219&#xff08;A6&#xff09;<\/td>\n<\/tr>\n<tr>\n<td>\u8bed\u4e49\u6f02\u79fb<\/td>\n<td>Semantic Drift<\/td>\n<td>\u540c\u4e00\u89c4\u5219\u5728\u4e0d\u540c Runtime \u5b9e\u73b0\u4e0a\u4ea7\u751f\u4e0d\u540c\u5224\u5b9a\u7ed3\u679c\u7684\u73b0\u8c61<\/td>\n<\/tr>\n<tr>\n<td>\u62bd\u8c61\u8bed\u6cd5\u6811<\/td>\n<td>AST<\/td>\n<td>EBL \u89c4\u5219\u7ecf\u89e3\u6790\u540e\u7684\u5185\u90e8\u7ed3\u6784\u8868\u793a&#xff0c;\u662f\u53ef\u9a8c\u8bc1\u6027\u7684\u8f7d\u4f53<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h4>\u5bf9\u6297\u5206\u6790<\/h4>\n<table>\n<tr>\u672f\u8bed\u82f1\u6587\u5b9a\u4e49<\/tr>\n<tbody>\n<tr>\n<td>\u5bf9\u6297\u6027\u5b8c\u6574<\/td>\n<td>Adversarial Completeness<\/td>\n<td>\u7cfb\u7edf\u5728\u660e\u786e\u5b9a\u4e49\u7684\u5a01\u80c1\u6a21\u578b\u4e0b&#xff0c;\u5176\u5173\u952e\u5b89\u5168\u547d\u9898\u4ecd\u7136\u6210\u7acb\u7684\u6027\u8d28<\/td>\n<\/tr>\n<tr>\n<td>\u5b89\u5168\u547d\u9898<\/td>\n<td>Security Proposition<\/td>\n<td>\u4ee5\u53ef\u8bc1\u4f2a\u5f62\u5f0f\u9648\u8ff0\u7684\u5b89\u5168\u65ad\u8a00&#xff0c;\u533a\u522b\u4e8e&#034;\u5177\u5907\u67d0\u9879\u5b89\u5168\u529f\u80fd&#034;\u7684\u63cf\u8ff0<\/td>\n<\/tr>\n<tr>\n<td>\u4e0d\u53d8\u91cf<\/td>\n<td>Invariant<\/td>\n<td>\u5728\u4efb\u4f55\u8f93\u5165\u4e0e\u72b6\u6001\u4e0b\u5747\u987b\u4fdd\u6301\u4e3a\u771f\u7684\u7cfb\u7edf\u6027\u8d28<\/td>\n<\/tr>\n<tr>\n<td>\u5931\u8d25\u77e9\u9635<\/td>\n<td>Failure Matrix<\/td>\n<td>\u679a\u4e3e\u5173\u952e\u5931\u8d25\u65b9\u5f0f\u53ca\u5176\u5bf9\u5e94\u5904\u7f6e\u4e0e\u6b8b\u4f59\u98ce\u9669\u7684\u8868\u683c<\/td>\n<\/tr>\n<tr>\n<td>\u6b8b\u4f59\u98ce\u9669<\/td>\n<td>Residual Risk<\/td>\n<td>\u5728\u65e2\u5b9a\u5a01\u80c1\u6a21\u578b\u4e0e\u673a\u5236\u4e0b\u4ecd\u672a\u88ab\u8986\u76d6\u7684\u98ce\u9669<\/td>\n<\/tr>\n<tr>\n<td>EX-STRIDE<\/td>\n<td>\u2014<\/td>\n<td>\u9762\u5411\u6267\u884c\u94fe\u7684\u5a01\u80c1\u5206\u7c7b\u6cd5&#xff0c;\u66ff\u4ee3\u9762\u5411\u6570\u636e\u4e0e\u8eab\u4efd\u7684\u4f20\u7edf STRIDE&#xff08;\u8868 3-1&#xff09;<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<hr \/>\n<h2>\u7b2c 1 \u7ae0\u3000\u6267\u884c\u7f1d\u9699 Execution Gap<\/h2>\n<p>\u9898\u8bb0&#xff1a;\u6bcf\u4e00\u6b65\u90fd\u5408\u6cd5&#xff0c;\u6700\u7ec8\u7ed3\u679c\u4ecd\u7136\u53ef\u80fd\u662f\u9519\u7684\u3002<\/p>\n<hr \/>\n<h3>1.1 \u4f20\u7edf\u5b89\u5168\u7684\u4fdd\u62a4\u57df&#xff1a;\u8282\u70b9\u800c\u975e\u8def\u5f84<\/h3>\n<p>\u73b0\u4ee3\u5b89\u5168\u4f53\u7cfb\u7531\u56db\u7c7b\u673a\u5236\u6784\u6210&#xff0c;\u5b83\u4eec\u5206\u522b\u628a\u5b88\u6267\u884c\u8def\u5f84\u4e0a\u7684\u4e0d\u540c\u4f4d\u7f6e\u3002\u8eab\u4efd\u673a\u5236\u4fdd\u62a4\u4e3b\u4f53\u5165\u53e3&#xff0c;\u56de\u7b54&#034;\u8c01\u8fdb\u5165\u4e86\u7cfb\u7edf&#034;&#xff1b;\u6743\u9650\u673a\u5236\u4fdd\u62a4\u80fd\u529b\u8fb9\u754c&#xff0c;\u56de\u7b54&#034;\u8c01\u83b7\u5f97\u4e86\u4ec0\u4e48\u8d44\u683c&#034;&#xff1b;\u8ba4\u8bc1\u673a\u5236\u4fdd\u62a4\u901a\u4fe1\u6765\u6e90&#xff0c;\u56de\u7b54&#034;\u8fd9\u4e2a\u8bf7\u6c42\u6765\u81ea\u4f55\u5904&#034;&#xff1b;\u5ba1\u6279\u673a\u5236\u4fdd\u62a4\u7ec4\u7ec7\u51b3\u7b56&#xff0c;\u56de\u7b54&#034;\u8c01\u8868\u8fbe\u4e86\u540c\u610f&#034;\u3002\u56db\u8005\u5728\u5404\u81ea\u7684\u95ee\u9898\u57df\u5185\u6210\u719f\u4e14\u6709\u6548&#xff0c;\u5176\u4ef7\u503c\u4e0d\u56e0 AI \u7684\u51fa\u73b0\u800c\u964d\u4f4e\u3002<\/p>\n<p>\u95ee\u9898\u4e0d\u5728\u4e8e\u4efb\u4e00\u673a\u5236\u7684\u6709\u6548\u6027&#xff0c;\u800c\u5728\u4e8e\u5b83\u4eec\u7684\u7ec4\u7ec7\u65b9\u5f0f\u3002\u8fd9\u56db\u7c7b\u673a\u5236\u901a\u5e38\u7531\u4e0d\u540c\u56e2\u961f\u3001\u6309\u4e0d\u540c\u6807\u51c6\u3001\u5728\u4e0d\u540c\u65f6\u671f\u5206\u6563\u5efa\u8bbe&#xff1a;\u8eab\u4efd\u7cfb\u7edf\u53ea\u8d1f\u8d23\u8eab\u4efd&#xff0c;\u6743\u9650\u7cfb\u7edf\u53ea\u8d1f\u8d23\u8bbf\u95ee&#xff0c;\u5ba1\u6279\u7cfb\u7edf\u53ea\u8d1f\u8d23\u6d41\u7a0b&#xff0c;\u7b7e\u540d\u7cfb\u7edf\u53ea\u8d1f\u8d23\u7b7e\u540d&#xff0c;\u6267\u884c\u7cfb\u7edf\u53ea\u8d1f\u8d23\u628a\u6536\u5230\u7684\u547d\u4ee4\u8f6c\u5316\u4e3a\u7ed3\u679c\u3002\u6bcf\u4e2a\u7cfb\u7edf\u90fd\u5b8c\u6574\u5c65\u884c\u4e86\u81ea\u8eab\u804c\u8d23&#xff0c;\u4f46\u6ca1\u6709\u4efb\u4f55\u4e00\u4e2a\u7cfb\u7edf\u5bf9\u6574\u6761\u8def\u5f84\u8d1f\u8d23\u3002<\/p>\n<p>\u8868 1-1\u3000\u4f20\u7edf\u5b89\u5168\u673a\u5236\u7684\u4fdd\u62a4\u57df<\/p>\n<table>\n<tr>\u673a\u5236\u4fdd\u62a4\u5bf9\u8c61\u56de\u7b54\u7684\u95ee\u9898\u4e0d\u56de\u7b54\u7684\u95ee\u9898<\/tr>\n<tbody>\n<tr>\n<td>\u8eab\u4efd<\/td>\n<td>\u4e3b\u4f53\u5165\u53e3<\/td>\n<td>\u8c01\u8fdb\u5165\u4e86\u7cfb\u7edf<\/td>\n<td>\u8fdb\u5165\u540e\u8981\u505a\u7684\u4e8b\u662f\u5426\u4e0e\u5176\u58f0\u660e\u4e00\u81f4<\/td>\n<\/tr>\n<tr>\n<td>\u6743\u9650<\/td>\n<td>\u80fd\u529b\u8fb9\u754c<\/td>\n<td>\u8c01\u6709\u8d44\u683c\u505a\u8fd9\u7c7b\u64cd\u4f5c<\/td>\n<td>\u8fd9\u4e00\u6b21\u64cd\u4f5c\u662f\u5426\u5e94\u5f53\u53d1\u751f<\/td>\n<\/tr>\n<tr>\n<td>\u8ba4\u8bc1<\/td>\n<td>\u901a\u4fe1\u6765\u6e90<\/td>\n<td>\u8bf7\u6c42\u6765\u81ea\u4f55\u5904<\/td>\n<td>\u8bf7\u6c42\u5185\u5bb9\u662f\u5426\u4ecd\u4e0e\u539f\u59cb\u610f\u56fe\u4e00\u81f4<\/td>\n<\/tr>\n<tr>\n<td>\u5ba1\u6279<\/td>\n<td>\u51b3\u7b56\u8fc7\u7a0b<\/td>\n<td>\u8c01\u8868\u8fbe\u4e86\u540c\u610f<\/td>\n<td>\u540c\u610f\u7684\u5bf9\u8c61\u4e0e\u6267\u884c\u7684\u5bf9\u8c61\u662f\u5426\u4e3a\u540c\u4e00\u4e2a<\/td>\n<\/tr>\n<tr>\n<td>\u7b7e\u540d<\/td>\n<td>\u6570\u636e\u5b8c\u6574\u6027<\/td>\n<td>\u67d0\u5bc6\u94a5\u662f\u5426\u7b7e\u7f72\u4e86\u8fd9\u6bb5\u6570\u636e<\/td>\n<td>\u8fd9\u6bb5\u6570\u636e\u662f\u5426\u5e94\u5f53\u88ab\u7b7e\u7f72<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u4e0a\u8868\u6700\u540e\u4e00\u5217\u6784\u6210\u4e00\u4e2a\u5171\u540c\u7684\u7a7a\u767d&#xff1a;\u6ca1\u6709\u4efb\u4f55\u4e00\u5217\u56de\u7b54&#034;\u6700\u7ec8\u53d1\u751f\u7684\u73b0\u5b9e\u7ed3\u679c&#xff0c;\u4e3a\u4ec0\u4e48\u53ef\u4ee5\u88ab\u8ba4\u4e3a\u662f\u6700\u521d\u610f\u56fe\u7684\u5408\u6cd5\u5ef6\u7eed&#034;\u3002 \u8be5\u95ee\u9898\u4e0d\u5c5e\u4e8e\u5176\u4e2d\u4efb\u4f55\u4e00\u4e2a\u673a\u5236\u7684\u804c\u8d23&#xff0c;\u56e0\u800c\u5728\u67b6\u6784\u4e0a\u65e0\u4eba\u8ba4\u9886\u3002<\/p>\n<p>\u7531\u6b64\u4ea7\u751f\u4e00\u79cd\u5728\u5b9e\u8df5\u4e2d\u5e38\u89c1\u3001\u5728\u8bbe\u8ba1\u4e0a\u5374\u672a\u88ab\u9884\u671f\u7684\u5c40\u9762&#xff1a;\u7528\u6237\u8eab\u4efd\u771f\u5b9e&#xff0c;\u6743\u9650\u914d\u7f6e\u6b63\u786e&#xff0c;\u5ba1\u6279\u6d41\u7a0b\u901a\u8fc7&#xff0c;\u6570\u5b57\u7b7e\u540d\u6709\u6548&#xff0c;\u63a5\u53e3\u8c03\u7528\u6210\u529f&#xff0c;\u8bbe\u5907\u6309\u6307\u4ee4\u8fd0\u884c\u2014\u2014\u800c\u6700\u7ec8\u53d1\u751f\u7684\u4e8b\u60c5&#xff0c;\u4ecd\u7136\u53ef\u80fd\u4e0d\u662f\u7528\u6237\u5e0c\u671b\u53d1\u751f\u7684\u4e8b\u60c5\u3002\u8fd9\u4e0d\u662f\u67d0\u4e2a\u8282\u70b9\u5931\u5b88\u7684\u7ed3\u679c&#xff0c;\u800c\u662f\u8282\u70b9\u4e4b\u95f4\u7f3a\u4e4f\u8fde\u7eed\u7ea6\u675f\u7684\u7ed3\u679c\u3002<\/p>\n<p>\u547d\u9898 P1.1&#xff08;\u5c40\u90e8\u6b63\u786e\u7684\u975e\u4f20\u9012\u6027&#xff09; \u6267\u884c\u94fe\u4e0a\u6bcf\u4e2a\u7ec4\u4ef6\u5747\u6ee1\u8db3\u5176\u81ea\u8eab\u89c4\u683c&#xff0c;\u4e0d\u8574\u542b\u94fe\u7684\u7aef\u5230\u7aef\u7ed3\u679c\u7b26\u5408\u539f\u59cb\u610f\u56fe\u3002\u56e0\u6b64&#034;\u6240\u6709\u7ec4\u4ef6\u5206\u522b\u6b63\u786e \u21d2 \u6574\u4f53\u7ed3\u679c\u6b63\u786e&#034;\u4e0d\u662f\u6709\u6548\u63a8\u8bba\u3002<\/p>\n<p>P1.1 \u662f\u672c\u4e66\u5168\u90e8\u540e\u7eed\u8bba\u8bc1\u7684\u8d77\u70b9\u3002\u82e5\u8be5\u63a8\u8bba\u6210\u7acb&#xff0c;\u6267\u884c\u63a7\u5236\u4fbf\u65e0\u5fc5\u8981&#xff1b;\u6b63\u56e0\u5176\u4e0d\u6210\u7acb&#xff0c;\u624d\u9700\u8981\u4e00\u4e2a\u4ee5\u6574\u6761\u8def\u5f84\u800c\u975e\u5355\u4e2a\u8282\u70b9\u4e3a\u5bf9\u8c61\u7684\u673a\u5236\u3002<\/p>\n<hr \/>\n<h3>1.2 AI \u5f15\u5165\u7684\u7ed3\u6784\u6027\u53d8\u5316<\/h3>\n<p>AI \u5e76\u975e\u7b2c\u4e00\u79cd\u80fd\u591f\u81ea\u52a8\u6267\u884c\u4efb\u52a1\u7684\u8f6f\u4ef6\u3002\u811a\u672c\u3001\u5de5\u4f5c\u6d41\u5f15\u64ce\u3001\u89c4\u5219\u7cfb\u7edf\u3001\u81ea\u52a8\u5316\u5e73\u53f0\u4e0e\u5de5\u4e1a\u63a7\u5236\u7cfb\u7edf\u65e9\u5df2\u627f\u62c5\u5927\u91cf\u65e0\u4eba\u5e72\u9884\u7684\u64cd\u4f5c&#xff0c;\u81ea\u52a8\u5316\u672c\u8eab\u5e76\u4e0d\u65b0\u9c9c\u3002\u771f\u6b63\u7684\u53d8\u5316\u5728\u4e8e\u8def\u5f84\u7684\u786e\u5b9a\u65f6\u523b&#xff1a;\u4f20\u7edf\u81ea\u52a8\u5316\u6cbf\u9884\u5148\u5b9a\u4e49\u7684\u8def\u5f84\u8fd0\u884c&#xff0c;\u8def\u5f84\u5728\u90e8\u7f72\u65f6\u786e\u5b9a&#xff0c;\u8fd0\u884c\u65f6\u4e0d\u53d8&#xff1b;AI \u7cfb\u7edf\u5219\u5728\u8fd0\u884c\u8fc7\u7a0b\u4e2d\u89e3\u91ca\u76ee\u6807\u3001\u9009\u62e9\u8def\u5f84\u5e76\u751f\u6210\u52a8\u4f5c&#xff0c;\u8def\u5f84\u5728\u8fd0\u884c\u65f6\u624d\u88ab\u786e\u5b9a\u3002<\/p>\n<p>\u8fd9\u4e00\u5dee\u522b\u4f7f\u5f97&#034;\u90e8\u7f72\u65f6\u5ba1\u67e5\u8def\u5f84&#034;\u8fd9\u4e00\u4f20\u7edf\u5b89\u5168\u624b\u6bb5\u5931\u53bb\u8986\u76d6\u80fd\u529b\u3002\u5ba1\u67e5\u8005\u5728\u90e8\u7f72\u65f6\u80fd\u770b\u5230\u7684\u662f\u80fd\u529b\u96c6\u5408&#xff0c;\u800c\u975e\u5c06\u88ab\u5b9e\u9645\u7ec4\u5408\u51fa\u7684\u8def\u5f84\u3002\u4ee5\u4e0b\u4e5d\u4e2a\u7ef4\u5ea6\u5206\u522b\u8bf4\u660e\u8be5\u53d8\u5316\u5982\u4f55\u5728\u6267\u884c\u94fe\u7684\u4e0d\u540c\u4f4d\u7f6e\u6269\u5927\u7f1d\u9699\u3002<\/p>\n<p>\u8868 1-2\u3000AI \u7cfb\u7edf\u5bf9\u6267\u884c\u94fe\u5404\u7ef4\u5ea6\u7684\u6269\u5f20<\/p>\n<table>\n<tr>#\u7ef4\u5ea6\u4f20\u7edf\u81ea\u52a8\u5316AI \u7cfb\u7edf\u5bf9\u6267\u884c\u94fe\u7684\u540e\u679c<\/tr>\n<tbody>\n<tr>\n<td>1<\/td>\n<td>\u76ee\u6807\u89e3\u91ca<\/td>\n<td>\u65e0\u89e3\u91ca\u73af\u8282&#xff0c;\u6307\u4ee4\u5373\u8def\u5f84<\/td>\n<td>\u81ea\u7136\u8bed\u8a00\u76ee\u6807\u7531\u6a21\u578b\u89e3\u91ca\u4e3a\u7ed3\u6784\u5316\u8bf7\u6c42<\/td>\n<td>\u89e3\u91ca\u7a7a\u95f4\u6269\u5927&#xff0c;\u610f\u56fe\u4e0e\u8bf7\u6c42\u95f4\u51fa\u73b0\u8bed\u4e49\u635f\u8017<\/td>\n<\/tr>\n<tr>\n<td>2<\/td>\n<td>\u8def\u5f84\u89c4\u5212<\/td>\n<td>\u8def\u5f84\u9884\u5b9a\u4e49<\/td>\n<td>\u8fd0\u884c\u65f6\u89c4\u5212\u591a\u6b65\u65b9\u6848<\/td>\n<td>\u884c\u52a8\u7a7a\u95f4\u6269\u5927&#xff0c;\u5b9e\u9645\u8def\u5f84\u4e0d\u53ef\u5728\u90e8\u7f72\u65f6\u679a\u4e3e<\/td>\n<\/tr>\n<tr>\n<td>3<\/td>\n<td>\u5de5\u5177\u8fde\u63a5<\/td>\n<td>\u63a5\u53e3\u56fa\u5b9a\u3001\u6570\u91cf\u6709\u9650<\/td>\n<td>\u901a\u8fc7 MCP \u7b49\u534f\u8bae\u52a8\u6001\u53d1\u73b0\u4e0e\u63a5\u5165\u5de5\u5177<\/td>\n<td>\u8fde\u63a5\u7a7a\u95f4\u6269\u5927&#xff0c;\u80fd\u529b\u8fb9\u754c\u968f\u73af\u5883\u53d8\u5316<\/td>\n<\/tr>\n<tr>\n<td>4<\/td>\n<td>\u53c2\u6570\u751f\u6210<\/td>\n<td>\u53c2\u6570\u7531\u4e0a\u6e38\u7cfb\u7edf\u8ba1\u7b97<\/td>\n<td>\u53c2\u6570\u7531\u6a21\u578b\u751f\u6210<\/td>\n<td>\u751f\u6210\u7a7a\u95f4\u6269\u5927&#xff0c;\u5173\u952e\u5b57\u6bb5\u53ef\u80fd\u65e0\u4e0a\u6e38\u6765\u6e90<\/td>\n<\/tr>\n<tr>\n<td>5<\/td>\n<td>\u6d41\u7a0b\u7f16\u6392<\/td>\n<td>\u6b65\u9aa4\u4e0e\u4f9d\u8d56\u56fa\u5b9a<\/td>\n<td>\u52a8\u6001\u7f16\u6392\u3001\u6761\u4ef6\u5206\u652f\u7531\u6a21\u578b\u51b3\u5b9a<\/td>\n<td>\u4f20\u64ad\u7a7a\u95f4\u6269\u5927&#xff0c;\u5355\u70b9\u8bef\u89e3\u53ef\u8de8\u6b65\u9aa4\u4f20\u64ad<\/td>\n<\/tr>\n<tr>\n<td>6<\/td>\n<td>\u591a\u4e3b\u4f53\u534f\u4f5c<\/td>\n<td>\u5355\u4e00\u6267\u884c\u4e3b\u4f53<\/td>\n<td>\u591a Agent \u5206\u5de5\u4e0e\u76f8\u4e92\u8c03\u7528<\/td>\n<td>\u8d23\u4efb\u7a7a\u95f4\u6269\u5927&#xff0c;\u65e0\u5355\u4e00\u4e3b\u4f53\u53ef\u5f52\u56e0<\/td>\n<\/tr>\n<tr>\n<td>7<\/td>\n<td>\u6267\u884c\u901f\u5ea6<\/td>\n<td>\u53d7\u4eba\u5de5\u8282\u594f\u7ea6\u675f<\/td>\n<td>\u6beb\u79d2\u7ea7\u8fde\u7eed\u6267\u884c<\/td>\n<td>\u53cd\u5e94\u8ddd\u79bb\u7f29\u77ed&#xff0c;\u4eba\u5de5\u4ecb\u5165\u7a97\u53e3\u6d88\u5931<\/td>\n<\/tr>\n<tr>\n<td>8<\/td>\n<td>\u6267\u884c\u89c4\u6a21<\/td>\n<td>\u5355\u6b21\u64cd\u4f5c<\/td>\n<td>\u6279\u91cf\u3001\u5e76\u53d1\u3001\u6301\u7eed\u6267\u884c<\/td>\n<td>\u9519\u8bef\u534a\u5f84\u6269\u5927&#xff0c;\u5355\u6b21\u8bef\u89e3\u5f71\u54cd\u5927\u91cf\u5bf9\u8c61<\/td>\n<\/tr>\n<tr>\n<td>9<\/td>\n<td>\u4e0a\u4e0b\u6587\u8f93\u5165<\/td>\n<td>\u8f93\u5165\u53d7\u63a7\u4e14\u7ed3\u6784\u5316<\/td>\n<td>\u68c0\u7d22\u5185\u5bb9\u3001\u5de5\u5177\u8fd4\u56de\u3001\u5916\u90e8\u6587\u6863\u5747\u8fdb\u5165\u4e0a\u4e0b\u6587<\/td>\n<td>\u653b\u51fb\u9762\u6269\u5927&#xff0c;\u8f93\u5165\u901a\u9053\u6210\u4e3a\u63a7\u5236\u901a\u9053<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u4e5d\u4e2a\u7ef4\u5ea6\u7684\u5171\u540c\u7ed3\u6784\u662f&#xff1a;\u6bcf\u4e00\u9879\u90fd\u589e\u52a0\u4e86\u4ece\u610f\u56fe\u5230\u52a8\u4f5c\u4e4b\u95f4\u7684\u8f6c\u6362\u6b21\u6570\u6216\u8f6c\u6362\u81ea\u7531\u5ea6&#xff0c;\u800c\u8f6c\u6362\u6b63\u662f\u5173\u7cfb\u65ad\u88c2\u53d1\u751f\u7684\u4f4d\u7f6e&#xff08;\u89c1 1.3&#xff09;\u3002\u4f20\u7edf\u81ea\u52a8\u5316\u4e2d\u8f6c\u6362\u6b21\u6570\u5c11\u4e14\u56fa\u5b9a&#xff0c;\u7f1d\u9699\u8868\u73b0\u4e3a\u4e2a\u522b\u7cfb\u7edf\u7684\u96c6\u6210\u7f3a\u9677&#xff1b;AI \u7cfb\u7edf\u4e2d\u8f6c\u6362\u6b21\u6570\u591a\u4e14\u53ef\u53d8&#xff0c;\u7f1d\u9699\u4e0d\u518d\u662f\u96c6\u6210\u65f6\u7684\u4f8b\u5916&#xff0c;\u800c\u6210\u4e3a\u67b6\u6784\u7684\u5e38\u6001\u5c5e\u6027\u3002<\/p>\n<p>\u547d\u9898 P1.2&#xff08;\u7f1d\u9699\u7684\u5e38\u6001\u5316&#xff09; \u5728\u8fd0\u884c\u65f6\u786e\u5b9a\u8def\u5f84\u7684\u7cfb\u7edf\u4e2d&#xff0c;\u6267\u884c\u7f1d\u9699\u4e0d\u662f\u53ef\u901a\u8fc7\u66f4\u4e25\u683c\u7684\u96c6\u6210\u6d4b\u8bd5\u6d88\u9664\u7684\u7f3a\u9677&#xff0c;\u800c\u662f\u8def\u5f84\u4e0d\u53ef\u9884\u5148\u679a\u4e3e\u8fd9\u4e00\u6027\u8d28\u7684\u76f4\u63a5\u7ed3\u679c\u3002<\/p>\n<p>\u5176\u63a8\u8bba\u5177\u6709\u5de5\u7a0b\u610f\u4e49&#xff1a;\u6cbb\u7406\u6267\u884c\u7f1d\u9699\u7684\u624b\u6bb5\u4e0d\u80fd\u662f&#034;\u628a\u6240\u6709\u8def\u5f84\u90fd\u5ba1\u67e5\u4e00\u904d&#034;&#xff0c;\u56e0\u4e3a\u8def\u5f84\u96c6\u5408\u5728\u90e8\u7f72\u65f6\u4e0d\u5b58\u5728\u3002\u53ef\u884c\u7684\u624b\u6bb5\u53ea\u80fd\u662f\u5728\u8def\u5f84\u7684\u7ec8\u70b9\u8bbe\u7f6e\u7ea6\u675f&#xff0c;\u5373\u5bf9\u6700\u7ec8\u6267\u884c\u5bf9\u8c61\u8fdb\u884c\u88c1\u51b3\u3002\u8fd9\u4e00\u7ed3\u8bba\u5c06\u5728\u7b2c 2 \u7ae0\u5c55\u5f00\u3002<\/p>\n<hr \/>\n<h3>1.3 \u6267\u884c\u7f1d\u9699\u7684\u5b9a\u4e49\u4e0e\u6210\u56e0<\/h3>\n<h4>\u8f6c\u6362\u70b9\u5373\u65ad\u88c2\u70b9<\/h4>\n<p>\u8003\u5bdf\u4e00\u6761\u6700\u7b80\u6267\u884c\u94fe&#xff1a;<\/p>\n<p>Intent \u2192 Policy \u2192 Approval \u2192 Execution<\/p>\n<p>\u7528\u6237\u63d0\u51fa\u610f\u56fe&#xff0c;\u7cfb\u7edf\u4f9d\u7b56\u7565\u5224\u65ad&#xff0c;\u76f8\u5173\u65b9\u5b8c\u6210\u5ba1\u6279&#xff0c;\u6267\u884c\u7cfb\u7edf\u4ea7\u751f\u7ed3\u679c\u3002\u4ece\u7ec4\u4ef6\u6784\u6210\u770b\u8fd9\u6761\u8def\u5f84\u5df2\u7ecf\u5b8c\u6574&#xff0c;\u4f46\u9010\u6bb5\u68c0\u67e5\u53ef\u4ee5\u53d1\u73b0&#xff0c;\u6bcf\u4e24\u4e2a\u8282\u70b9\u4e4b\u95f4\u90fd\u5b58\u5728\u4e00\u6b21\u8f6c\u6362&#xff1a;\u610f\u56fe\u987b\u88ab\u89e3\u91ca\u4e3a\u7ed3\u6784\u5316\u8bf7\u6c42&#xff1b;\u8bf7\u6c42\u987b\u88ab\u6620\u5c04\u4e3a\u7b56\u7565\u8f93\u5165&#xff1b;\u7b56\u7565\u7ed3\u8bba\u987b\u88ab\u8f6c\u5316\u4e3a\u5ba1\u6279\u5bf9\u8c61&#xff1b;\u5ba1\u6279\u7ed3\u679c\u987b\u88ab\u7ed1\u5b9a\u5230\u6700\u7ec8 Payload&#xff1b;Payload \u987b\u88ab\u6295\u9012\u5230\u5177\u4f53\u6267\u884c\u5bf9\u8c61&#xff1b;\u6267\u884c\u5bf9\u8c61\u987b\u5728\u6b63\u786e\u72b6\u6001\u4e0e\u65f6\u523b\u5b8c\u6210\u52a8\u4f5c\u3002<\/p>\n<p>\u8fd9\u4e9b\u8f6c\u6362\u4e0d\u81ea\u7136\u6210\u7acb\u3002\u6bcf\u4e00\u6b21\u8f6c\u6362\u90fd\u53ef\u80fd\u4e22\u5931\u7ea6\u675f\u3001\u66ff\u6362\u5bf9\u8c61\u3001\u8865\u5168\u7f3a\u5931\u5b57\u6bb5\u6216\u6539\u53d8\u4f5c\u7528\u8303\u56f4&#xff0c;\u800c\u94fe\u4e0a\u901a\u5e38\u4e0d\u5b58\u5728\u9a8c\u8bc1\u8f6c\u6362\u5fe0\u5b9e\u6027\u7684\u73af\u8282\u3002\u4ee5\u610f\u56fe\u4e3a\u4f8b&#xff1a;\u4eba\u7c7b\u610f\u56fe\u5929\u7136\u4e0d\u5b8c\u6574\u2014\u2014&#034;\u628a\u8fd9\u7b14\u6b3e\u4ed8\u6389&#034;\u672a\u6307\u660e\u8d26\u6237\u3001\u7f51\u7edc\u3001\u5e01\u79cd\u3001\u624b\u7eed\u8d39\u4e0a\u9650\u4e0e\u622a\u6b62\u65f6\u95f4&#xff1b;&#034;\u6062\u590d\u670d\u52a1\u5668&#034;\u672a\u6307\u660e\u5141\u8bb8\u91cd\u542f\u7684\u670d\u52a1\u8303\u56f4\u3001\u662f\u5426\u53ef\u4e22\u5931\u5f53\u524d\u4efb\u52a1\u3001\u662f\u5426\u5141\u8bb8\u5207\u6362\u5907\u7528\u8282\u70b9\u3002\u7f3a\u5931\u90e8\u5206\u5fc5\u7136\u7531\u4e0b\u6e38\u8865\u5168&#xff0c;\u800c\u8865\u5168\u7ed3\u679c\u4e0d\u53d7\u539f\u59cb\u610f\u56fe\u7ea6\u675f\u3002<\/p>\n<p>\u53e6\u4e00\u7aef\u540c\u6837\u5b58\u5728\u7ed3\u6784\u6027\u5c40\u9650\u3002\u591a\u6570\u6267\u884c\u7cfb\u7edf\u7684\u804c\u8d23\u88ab\u6709\u610f\u8bbe\u8ba1\u5f97\u72ed\u7a84&#xff1a;\u533a\u5757\u94fe\u8282\u70b9\u9a8c\u8bc1\u4ea4\u6613\u683c\u5f0f\u4e0e\u7b7e\u540d&#xff0c;\u64cd\u4f5c\u7cfb\u7edf\u9a8c\u8bc1\u8c03\u7528\u8005\u6743\u9650&#xff0c;\u5de5\u4e1a\u63a7\u5236\u5668\u9a8c\u8bc1\u547d\u4ee4\u662f\u5426\u7b26\u5408\u534f\u8bae&#xff0c;API \u670d\u52a1\u9a8c\u8bc1 Token\u3001\u53c2\u6570\u7c7b\u578b\u4e0e\u8bf7\u6c42\u7ed3\u6784\u3002\u8fd9\u4e9b\u9a8c\u8bc1\u4fdd\u8bc1\u547d\u4ee4\u53ef\u88ab\u63a5\u53d7&#xff0c;\u4e0d\u5224\u65ad\u547d\u4ee4\u662f\u5426\u5e94\u5f53\u88ab\u63a5\u53d7\u3002\u5176\u540e\u679c\u662f\u4e00\u7ec4\u76f8\u4e92\u6307\u5411\u7684\u5047\u8bbe&#xff1a;\u4e0a\u5c42\u8ba4\u4e3a\u6267\u884c\u7aef\u4f1a\u4fdd\u969c\u5b89\u5168&#xff0c;\u6267\u884c\u7aef\u8ba4\u4e3a\u4e0a\u5c42\u5df2\u5b8c\u6210\u5224\u65ad&#xff0c;\u4e2d\u95f4\u7cfb\u7edf\u8ba4\u4e3a\u81ea\u5df1\u53ea\u8d1f\u8d23\u4f20\u9012&#xff0c;\u5ba1\u6279\u7cfb\u7edf\u8ba4\u4e3a\u81ea\u5df1\u53ea\u8d1f\u8d23\u6536\u96c6\u540c\u610f&#xff0c;AI \u8ba4\u4e3a\u81ea\u5df1\u53ea\u8d1f\u8d23\u5b8c\u6210\u4efb\u52a1\u3002\u6bcf\u4e00\u5c42\u90fd\u628a\u5173\u952e\u8d23\u4efb\u5b9a\u4f4d\u5728\u53e6\u4e00\u5c42\u3002<\/p>\n<h4>\u5b9a\u4e49<\/h4>\n<p>\u5b9a\u4e49 D1.3.1&#xff08;\u6267\u884c\u7f1d\u9699 \/ Execution Gap&#xff09; \u4ece\u539f\u59cb\u610f\u56fe\u5f62\u6210\u5230\u6700\u7ec8\u73b0\u5b9e\u7ed3\u679c\u53d1\u751f\u4e4b\u95f4&#xff0c;\u7531\u89e3\u91ca\u3001\u7b56\u7565\u6620\u5c04\u3001\u5ba1\u6279\u3001\u7f16\u6392\u3001\u53c2\u6570\u751f\u6210\u3001\u5bf9\u8c61\u7ed1\u5b9a\u4e0e\u72b6\u6001\u53d8\u5316\u5171\u540c\u6784\u6210&#xff0c;\u800c\u7f3a\u4e4f\u7aef\u5230\u7aef\u6267\u884c\u7ea6\u675f\u7684\u7ed3\u6784\u6027\u7a7a\u95f4\u3002<\/p>\n<p>\u6267\u884c\u7f1d\u9699\u4e0d\u662f\u4e00\u4e2a\u65f6\u95f4\u95f4\u9694&#xff0c;\u4e5f\u4e0d\u5bf9\u5e94\u4efb\u4f55\u5355\u4e00\u7ec4\u4ef6\u3002\u5b83\u662f\u4e00\u7ec4\u5173\u7cfb\u65ad\u88c2\u7684\u96c6\u5408&#xff1a;\u610f\u56fe\u4e0e\u8bf7\u6c42\u4e4b\u95f4\u3001\u8bf7\u6c42\u4e0e\u7b56\u7565\u4e8b\u5b9e\u4e4b\u95f4\u3001\u7b56\u7565\u7ed3\u8bba\u4e0e\u5ba1\u6279\u5bf9\u8c61\u4e4b\u95f4\u3001\u5ba1\u6279\u5bf9\u8c61\u4e0e\u6700\u7ec8 Payload \u4e4b\u95f4\u3001Payload \u4e0e\u5177\u4f53\u6267\u884c\u5bf9\u8c61\u4e4b\u95f4\u3001\u6570\u5b57\u72b6\u6001\u4e0e\u73b0\u5b9e\u72b6\u6001\u4e4b\u95f4\u3001\u6388\u6743\u8d23\u4efb\u4e0e\u6700\u7ec8\u540e\u679c\u4e4b\u95f4\u3002<\/p>\n<p>\u56fe 1-1\u3000\u6267\u884c\u94fe\u4e0a\u7684\u4e03\u5904\u5173\u7cfb\u65ad\u88c2<\/p>\n<p>  #mermaid-svg-CfzVlvhM265RBRjM{font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;font-size:16px;fill:#333;}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#mermaid-svg-CfzVlvhM265RBRjM .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#mermaid-svg-CfzVlvhM265RBRjM .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#mermaid-svg-CfzVlvhM265RBRjM .error-icon{fill:#552222;}#mermaid-svg-CfzVlvhM265RBRjM .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-CfzVlvhM265RBRjM .edge-thickness-normal{stroke-width:1px;}#mermaid-svg-CfzVlvhM265RBRjM .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-CfzVlvhM265RBRjM .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-CfzVlvhM265RBRjM .edge-thickness-invisible{stroke-width:0;fill:none;}#mermaid-svg-CfzVlvhM265RBRjM .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-CfzVlvhM265RBRjM .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-CfzVlvhM265RBRjM .marker{fill:#333333;stroke:#333333;}#mermaid-svg-CfzVlvhM265RBRjM .marker.cross{stroke:#333333;}#mermaid-svg-CfzVlvhM265RBRjM svg{font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-CfzVlvhM265RBRjM p{margin:0;}#mermaid-svg-CfzVlvhM265RBRjM .label{font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;color:#333;}#mermaid-svg-CfzVlvhM265RBRjM .cluster-label text{fill:#333;}#mermaid-svg-CfzVlvhM265RBRjM .cluster-label span{color:#333;}#mermaid-svg-CfzVlvhM265RBRjM .cluster-label span p{background-color:transparent;}#mermaid-svg-CfzVlvhM265RBRjM .label text,#mermaid-svg-CfzVlvhM265RBRjM span{fill:#333;color:#333;}#mermaid-svg-CfzVlvhM265RBRjM .node rect,#mermaid-svg-CfzVlvhM265RBRjM .node circle,#mermaid-svg-CfzVlvhM265RBRjM .node ellipse,#mermaid-svg-CfzVlvhM265RBRjM .node polygon,#mermaid-svg-CfzVlvhM265RBRjM .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-svg-CfzVlvhM265RBRjM .rough-node .label text,#mermaid-svg-CfzVlvhM265RBRjM .node .label text,#mermaid-svg-CfzVlvhM265RBRjM .image-shape .label,#mermaid-svg-CfzVlvhM265RBRjM .icon-shape .label{text-anchor:middle;}#mermaid-svg-CfzVlvhM265RBRjM .node .katex path{fill:#000;stroke:#000;stroke-width:1px;}#mermaid-svg-CfzVlvhM265RBRjM .rough-node .label,#mermaid-svg-CfzVlvhM265RBRjM .node .label,#mermaid-svg-CfzVlvhM265RBRjM .image-shape .label,#mermaid-svg-CfzVlvhM265RBRjM .icon-shape .label{text-align:center;}#mermaid-svg-CfzVlvhM265RBRjM .node.clickable{cursor:pointer;}#mermaid-svg-CfzVlvhM265RBRjM .root .anchor path{fill:#333333!important;stroke-width:0;stroke:#333333;}#mermaid-svg-CfzVlvhM265RBRjM .arrowheadPath{fill:#333333;}#mermaid-svg-CfzVlvhM265RBRjM .edgePath .path{stroke:#333333;stroke-width:2.0px;}#mermaid-svg-CfzVlvhM265RBRjM .flowchart-link{stroke:#333333;fill:none;}#mermaid-svg-CfzVlvhM265RBRjM .edgeLabel{background-color:rgba(232,232,232, 0.8);text-align:center;}#mermaid-svg-CfzVlvhM265RBRjM .edgeLabel p{background-color:rgba(232,232,232, 0.8);}#mermaid-svg-CfzVlvhM265RBRjM .edgeLabel rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#mermaid-svg-CfzVlvhM265RBRjM .labelBkg{background-color:rgba(232, 232, 232, 0.5);}#mermaid-svg-CfzVlvhM265RBRjM .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#mermaid-svg-CfzVlvhM265RBRjM .cluster text{fill:#333;}#mermaid-svg-CfzVlvhM265RBRjM .cluster span{color:#333;}#mermaid-svg-CfzVlvhM265RBRjM div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#mermaid-svg-CfzVlvhM265RBRjM .flowchartTitleText{text-anchor:middle;font-size:18px;fill:#333;}#mermaid-svg-CfzVlvhM265RBRjM rect.text{fill:none;stroke-width:0;}#mermaid-svg-CfzVlvhM265RBRjM .icon-shape,#mermaid-svg-CfzVlvhM265RBRjM .image-shape{background-color:rgba(232,232,232, 0.8);text-align:center;}#mermaid-svg-CfzVlvhM265RBRjM .icon-shape p,#mermaid-svg-CfzVlvhM265RBRjM .image-shape p{background-color:rgba(232,232,232, 0.8);padding:2px;}#mermaid-svg-CfzVlvhM265RBRjM .icon-shape .label rect,#mermaid-svg-CfzVlvhM265RBRjM .image-shape .label rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#mermaid-svg-CfzVlvhM265RBRjM .label-icon{display:inline-block;height:1em;overflow:visible;vertical-align:-0.125em;}#mermaid-svg-CfzVlvhM265RBRjM .node .label-icon path{fill:currentColor;stroke:revert;stroke-width:revert;}#mermaid-svg-CfzVlvhM265RBRjM :root{&#8211;mermaid-font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;}#mermaid-svg-CfzVlvhM265RBRjM .gap&gt;*{stroke-dasharray:5 5!important;}#mermaid-svg-CfzVlvhM265RBRjM .gap span{stroke-dasharray:5 5!important;} <\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>\u2460 \u89e3\u91ca\u635f\u8017<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>\u2461 \u4e8b\u5b9e\u7f3a\u8bc1<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>\u2462 \u5bf9\u8c61\u4e0d\u4e00\u81f4<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>\u2463 \u7ed1\u5b9a\u7f3a\u5931<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>\u2464 \u6295\u9012\u504f\u79fb<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>\u2465 \u72b6\u6001\u6f02\u79fb<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>\u2466 \u8d23\u4efb\u65ad\u88c2<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u610f\u56fe<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u7ed3\u6784\u5316\u8bf7\u6c42<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u7b56\u7565\u5224\u65ad<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u5ba1\u6279\u5bf9\u8c61<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u6700\u7ec8 Payload<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u6267\u884c\u5bf9\u8c61<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u73b0\u5b9e\u7ed3\u679c<\/p>\n<p><\/span> <\/p>\n<p>\u56fe\u4e2d\u6bcf\u6761\u865a\u7ebf\u4ee3\u8868\u4e00\u6b21\u672a\u88ab\u9a8c\u8bc1\u7684\u8f6c\u6362\u3002\u6267\u884c\u63a7\u5236\u7684\u4efb\u52a1&#xff0c;\u5373\u662f\u628a\u5176\u4e2d\u6bcf\u4e00\u6761\u865a\u7ebf\u8f6c\u5316\u4e3a\u53ef\u9a8c\u8bc1\u7684\u5b9e\u7ebf\u5173\u7cfb\u3002<\/p>\n<h4>\u5408\u6cd5\u8def\u5f84\u4ea7\u751f\u9519\u8bef\u7ed3\u679c<\/h4>\n<p>\u6267\u884c\u7f1d\u9699\u6700\u96be\u5904\u7406\u4e4b\u5904\u5728\u4e8e&#xff0c;\u5b83\u4e0d\u4f9d\u8d56\u4efb\u4f55\u8fdd\u89c4\u884c\u4e3a\u3002\u8003\u5bdf\u4e00\u6761\u5b8c\u5168\u5408\u6cd5\u7684\u8def\u5f84&#xff1a;\u7528\u6237\u5408\u6cd5\u767b\u5f55&#xff0c;\u63d0\u51fa\u771f\u5b9e\u8bf7\u6c42&#xff0c;AI \u5408\u6cd5\u8c03\u7528\u5de5\u5177&#xff0c;Agent \u4f7f\u7528\u88ab\u6388\u6743\u7684\u63a5\u53e3&#xff0c;\u7b56\u7565\u5f15\u64ce\u6b63\u5e38\u8fd4\u56de\u5141\u8bb8&#xff0c;\u5ba1\u6279\u8005\u5b8c\u6210\u786e\u8ba4&#xff0c;\u7b7e\u540d\u7cfb\u7edf\u751f\u6210\u6709\u6548\u7b7e\u540d&#xff0c;\u6267\u884c\u7aef\u6210\u529f\u5b8c\u6210\u52a8\u4f5c\u3002\u4ece\u65e5\u5fd7\u770b&#xff0c;\u516b\u4e2a\u6b65\u9aa4\u5168\u90e8\u6b63\u5e38\u3002\u4f46\u82e5\u7b2c\u4e00\u6b65\u4e2d\u6a21\u578b\u8bef\u89e3\u4e86\u6267\u884c\u5bf9\u8c61&#xff0c;\u5176\u540e\u4e03\u4e2a\u5b89\u5168\u673a\u5236\u6240\u4fdd\u62a4\u7684&#xff0c;\u662f\u8fd9\u4e00\u8bef\u89e3\u6cbf\u94fe\u6761\u987a\u5229\u4f20\u64ad\u7684\u8fc7\u7a0b\u3002<\/p>\n<p>\u547d\u9898 P1.3&#xff08;\u5408\u6cd5\u8def\u5f84\u7684\u5931\u6548&#xff09; \u5408\u6cd5\u4e3b\u4f53\u3001\u5408\u6cd5\u6743\u9650\u4e0e\u5408\u6cd5\u6d41\u7a0b\u7684\u7ec4\u5408&#xff0c;\u4e0d\u6392\u9664\u4ea7\u751f\u4e0e\u539f\u59cb\u610f\u56fe\u4e0d\u7b26\u7684\u73b0\u5b9e\u7ed3\u679c\u3002\u56e0\u6b64\u6267\u884c\u7f1d\u9699\u4e0d\u80fd\u88ab\u5f52\u7c7b\u4e3a\u8bbf\u95ee\u63a7\u5236\u7f3a\u9677\u3001\u6a21\u578b\u5b89\u5168\u7f3a\u9677\u6216\u4e1a\u52a1\u903b\u8f91\u6f0f\u6d1e\u2014\u2014\u5b83\u6a2a\u8de8\u4e09\u8005\u7684\u8fb9\u754c\u3002<\/p>\n<h4>\u8d23\u4efb\u7f3a\u5931<\/h4>\n<p>\u4e0a\u8ff0\u7ed3\u6784\u7684\u7ec4\u7ec7\u6210\u56e0\u662f\u6e05\u6670\u7684\u3002\u73b0\u4ee3\u7cfb\u7edf\u6309\u7ec4\u4ef6\u5212\u5206\u8d23\u4efb&#xff1a;\u6a21\u578b\u56e2\u961f\u8d1f\u8d23\u6a21\u578b\u80fd\u529b&#xff0c;Agent \u56e2\u961f\u8d1f\u8d23\u4efb\u52a1\u7f16\u6392&#xff0c;\u8eab\u4efd\u56e2\u961f\u8d1f\u8d23\u8ba4\u8bc1&#xff0c;\u5b89\u5168\u56e2\u961f\u8d1f\u8d23\u6743\u9650&#xff0c;\u4e1a\u52a1\u56e2\u961f\u8d1f\u8d23\u5ba1\u6279&#xff0c;\u8bbe\u5907\u56e2\u961f\u8d1f\u8d23\u6267\u884c&#xff0c;\u5ba1\u8ba1\u56e2\u961f\u8d1f\u8d23\u7559\u75d5\u3002\u6bcf\u4e2a\u56e2\u961f\u90fd\u80fd\u8bc1\u660e\u5176\u7ec4\u4ef6\u7b26\u5408\u8bbe\u8ba1\u8981\u6c42&#xff0c;\u800c\u73b0\u5b9e\u7ed3\u679c\u4e0d\u7531\u4efb\u4f55\u5355\u4e00\u7ec4\u4ef6\u4ea7\u751f&#xff0c;\u5b83\u7531\u6574\u6761\u94fe\u5171\u540c\u4ea7\u751f\u3002<\/p>\n<p>\u82e5\u7ec4\u7ec7\u672a\u5b9a\u4e49\u72ec\u7acb\u7684\u6267\u884c\u63a7\u5236\u8d23\u4efb&#xff0c;\u7cfb\u7edf\u4fbf\u9ed8\u8ba4\u63a5\u53d7 P1.1 \u6240\u5426\u5b9a\u7684\u90a3\u4e2a\u63a8\u8bba\u3002<\/p>\n<p>\u547d\u9898 P1.4&#xff08;\u7aef\u5230\u7aef\u8d23\u4efb\u7f3a\u5931&#xff09; \u5728\u6309\u7ec4\u4ef6\u5212\u5206\u8d23\u4efb\u7684\u7ec4\u7ec7\u7ed3\u6784\u4e2d&#xff0c;\u82e5\u4e0d\u8bbe\u7acb\u4ee5\u6700\u7ec8\u73b0\u5b9e\u7ed3\u679c\u4e3a\u5bf9\u8c61\u7684\u72ec\u7acb\u8d23\u4efb\u4e3b\u4f53&#xff0c;\u5219\u6267\u884c\u94fe\u4e0a\u4e0d\u5b58\u5728\u5bf9\u8be5\u7ed3\u679c\u8d1f\u8d23\u7684\u4e3b\u4f53\u3002\u6240\u6709\u4eba\u8d1f\u8d23\u4e00\u90e8\u5206&#xff0c;\u7b49\u4ef7\u4e8e\u65e0\u4eba\u8d1f\u8d23\u6700\u7ec8\u7ed3\u679c\u3002<\/p>\n<p>P1.4 \u662f\u4e00\u9879\u7ec4\u7ec7\u547d\u9898\u800c\u975e\u6280\u672f\u547d\u9898&#xff0c;\u4f46\u5b83\u51b3\u5b9a\u6280\u672f\u65b9\u6848\u80fd\u5426\u843d\u5730&#xff1a;\u6267\u884c\u63a7\u5236\u82e5\u4e0d\u5bf9\u5e94\u4e00\u4e2a\u660e\u786e\u7684\u8d23\u4efb\u4e3b\u4f53&#xff0c;\u5176\u90e8\u7f72\u5c06\u7f3a\u4e4f\u7ec4\u7ec7\u4f9d\u636e\u3002<\/p>\n<hr \/>\n<h3>1.4 \u4e0e\u76f8\u90bb\u5b66\u79d1\u7684\u8fb9\u754c<\/h3>\n<p>AI \u6267\u884c\u5de5\u7a0b\u4e0d\u5728\u771f\u7a7a\u4e2d\u63d0\u51fa\u3002\u5b83\u4e0e\u82e5\u5e72\u6210\u719f\u9886\u57df\u5b58\u5728\u4ea4\u96c6&#xff0c;\u4f46\u4fdd\u62a4\u57df\u4e0d\u540c\u3002\u660e\u786e\u8fb9\u754c\u7684\u76ee\u7684\u4e0d\u662f\u5212\u5206\u5730\u76d8&#xff0c;\u800c\u662f\u8bf4\u660e\u4e3a\u4f55\u65e2\u6709\u9886\u57df\u7684\u6210\u679c\u65e0\u6cd5\u76f4\u63a5\u8986\u76d6\u672c\u4e66\u6240\u5b9a\u4e49\u7684\u95ee\u9898\u3002<\/p>\n<p>\u8868 1-3\u3000\u76f8\u90bb\u9886\u57df\u7684\u4fdd\u62a4\u57df\u4e0e\u8986\u76d6\u8fb9\u754c<\/p>\n<table>\n<tr>\u9886\u57df\u4fdd\u62a4\u5bf9\u8c61\u6838\u5fc3\u5224\u5b9a\u4e0e\u6267\u884c\u63a7\u5236\u7684\u4ea4\u96c6\u672a\u8986\u76d6\u4e4b\u5904<\/tr>\n<tbody>\n<tr>\n<td>\u96f6\u4fe1\u4efb\u67b6\u6784 Zero Trust<\/td>\n<td>\u8bbf\u95ee\u5173\u7cfb<\/td>\n<td>\u6bcf\u6b21\u8bbf\u95ee\u662f\u5426\u53ef\u4fe1<\/td>\n<td>\u62d2\u7edd\u9690\u5f0f\u4fe1\u4efb\u3001\u6301\u7eed\u9a8c\u8bc1<\/td>\n<td>\u5224\u5b9a\u5bf9\u8c61\u662f\u8bbf\u95ee\u8bf7\u6c42&#xff0c;\u975e\u6700\u7ec8\u6267\u884c\u5bf9\u8c61&#xff1b;\u4e0d\u5904\u7406\u610f\u56fe\u7ed1\u5b9a<\/td>\n<\/tr>\n<tr>\n<td>\u8eab\u4efd\u4e0e\u8bbf\u95ee\u7ba1\u7406 IAM<\/td>\n<td>\u4e3b\u4f53\u8d44\u683c<\/td>\n<td>\u8c01\u53ef\u4ee5\u505a\u4ec0\u4e48<\/td>\n<td>\u63d0\u4f9b\u8eab\u4efd\u4e0e\u6743\u9650\u8bc1\u636e<\/td>\n<td>\u8d44\u683c\u662f\u957f\u671f\u7684&#xff0c;\u4e0d\u5224\u5b9a\u5355\u6b21\u52a8\u4f5c\u662f\u5426\u5e94\u53d1\u751f<\/td>\n<\/tr>\n<tr>\n<td>\u5f62\u5f0f\u5316\u9a8c\u8bc1<\/td>\n<td>\u7a0b\u5e8f\u6027\u8d28<\/td>\n<td>\u5b9e\u73b0\u662f\u5426\u7b26\u5408\u89c4\u7ea6<\/td>\n<td>\u63d0\u4f9b\u4e0d\u53d8\u91cf\u4e0e\u8bc1\u660e\u65b9\u6cd5<\/td>\n<td>\u9a8c\u8bc1\u5bf9\u8c61\u662f\u4ee3\u7801&#xff0c;\u89c4\u7ea6\u672c\u8eab\u662f\u5426\u7b26\u5408\u610f\u56fe\u4e0d\u5728\u5176\u5185<\/td>\n<\/tr>\n<tr>\n<td>\u7cfb\u7edf\u53ef\u9760\u6027\u5de5\u7a0b SRE<\/td>\n<td>\u670d\u52a1\u53ef\u7528\u6027<\/td>\n<td>\u7cfb\u7edf\u662f\u5426\u6309\u9884\u671f\u8fd0\u884c<\/td>\n<td>\u6545\u969c\u6a21\u5f0f\u3001\u964d\u7ea7\u7b56\u7565<\/td>\n<td>\u4f18\u5316\u65b9\u5411\u662f\u53ef\u7528\u6027&#xff0c;\u4e0e\u4fdd\u5b88\u5931\u8d25\u5b58\u5728\u65b9\u5411\u51b2\u7a81<\/td>\n<\/tr>\n<tr>\n<td>\u529f\u80fd\u5b89\u5168 IEC 61508<\/td>\n<td>\u7269\u7406\u4f24\u5bb3\u98ce\u9669<\/td>\n<td>\u5931\u6548\u662f\u5426\u5bfc\u81f4\u5371\u9669\u72b6\u6001<\/td>\n<td>\u5b89\u5168\u5b8c\u6574\u6027\u7b49\u7ea7\u3001\u5931\u6548\u5206\u6790<\/td>\n<td>\u5047\u8bbe\u6307\u4ee4\u6765\u6e90\u53ef\u4fe1&#xff0c;\u4e0d\u5904\u7406\u6307\u4ee4\u8bed\u4e49\u662f\u5426\u5fe0\u5b9e\u4e8e\u610f\u56fe<\/td>\n<\/tr>\n<tr>\n<td>\u6a21\u578b\u5bf9\u9f50<\/td>\n<td>\u6a21\u578b\u884c\u4e3a<\/td>\n<td>\u8f93\u51fa\u662f\u5426\u7b26\u5408\u4eba\u7c7b\u504f\u597d<\/td>\n<td>\u964d\u4f4e\u8bef\u89e3\u6982\u7387<\/td>\n<td>\u6982\u7387\u6027\u6539\u5584&#xff0c;\u4e0d\u6784\u6210\u8fb9\u754c&#xff1b;\u672c\u4e66\u5c06\u5176\u7f6e\u4e8e\u8fb9\u754c\u4e4b\u4e0a\u800c\u975e\u4e4b\u5185<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u5176\u4e2d\u4e0e\u672c\u4e66\u6700\u63a5\u8fd1\u7684\u662f\u529f\u80fd\u5b89\u5168\u4e0e\u5f62\u5f0f\u5316\u9a8c\u8bc1\u3002\u4e24\u8005\u90fd\u5efa\u7acb\u4e86&#034;\u8bc1\u660e\u800c\u975e\u58f0\u660e&#034;\u7684\u4f20\u7edf&#xff0c;\u672c\u4e66\u7684\u5bf9\u6297\u6027\u5b8c\u6574&#xff08;\u7b2c 3 \u7ae0&#xff09;\u4e0e\u5224\u5b9a\u8bc1\u660e&#xff08;\u7b2c 2.5 \u8282&#xff09;\u76f4\u63a5\u53d7\u5176\u5f71\u54cd\u3002\u5dee\u522b\u5728\u4e8e\u5224\u5b9a\u5bf9\u8c61&#xff1a;\u529f\u80fd\u5b89\u5168\u5904\u7406&#034;\u8bbe\u5907\u5931\u6548\u662f\u5426\u5bfc\u81f4\u5371\u9669&#034;&#xff0c;\u5176\u8f93\u5165\u6307\u4ee4\u7684\u6b63\u786e\u6027\u662f\u524d\u63d0\u800c\u975e\u7ed3\u8bba&#xff1b;\u5f62\u5f0f\u5316\u9a8c\u8bc1\u5904\u7406&#034;\u5b9e\u73b0\u662f\u5426\u7b26\u5408\u89c4\u7ea6&#034;&#xff0c;\u89c4\u7ea6\u7684\u6b63\u786e\u6027\u540c\u6837\u662f\u524d\u63d0\u3002AI \u6267\u884c\u5de5\u7a0b\u6070\u597d\u5904\u7406\u8fd9\u4e24\u4e2a\u88ab\u4f5c\u4e3a\u524d\u63d0\u7684\u90e8\u5206\u2014\u2014\u6307\u4ee4\u662f\u5426\u5fe0\u5b9e\u4e8e\u610f\u56fe&#xff0c;\u4ee5\u53ca\u5728\u65e0\u6cd5\u8bc1\u660e\u65f6\u5e94\u5f53\u53d1\u751f\u4ec0\u4e48\u3002<\/p>\n<p>\u4e0e SRE \u7684\u5173\u7cfb\u9700\u8981\u5355\u72ec\u8bf4\u660e&#xff0c;\u56e0\u4e3a\u4e8c\u8005\u5b58\u5728\u771f\u5b9e\u7684\u65b9\u5411\u51b2\u7a81\u3002SRE \u4ee5\u53ef\u7528\u6027\u4e3a\u4f18\u5316\u76ee\u6807&#xff0c;\u6545\u969c\u65f6\u503e\u5411\u4e8e\u4fdd\u6301\u670d\u52a1&#xff1b;\u6267\u884c\u63a7\u5236\u4ee5\u4fdd\u5b88\u5931\u8d25\u4e3a\u67b6\u6784\u5c5e\u6027&#xff0c;\u65e0\u6cd5\u8bc1\u660e\u65f6\u62d2\u7edd\u653e\u884c\u3002\u8be5\u51b2\u7a81\u4e0d\u53ef\u901a\u8fc7\u6280\u672f\u624b\u6bb5\u6d88\u89e3&#xff0c;\u53ea\u80fd\u901a\u8fc7\u660e\u786e\u5212\u5206\u9002\u7528\u8303\u56f4\u6765\u5904\u7406&#xff1a;\u5bf9\u53ef\u56de\u6eda\u7684\u6570\u5b57\u64cd\u4f5c&#xff0c;\u53ef\u7528\u6027\u4f18\u5148\u5408\u7406&#xff1b;\u5bf9\u4e0d\u53ef\u64a4\u9500\u7684\u73b0\u5b9e\u52a8\u4f5c&#xff0c;\u4fdd\u5b88\u5931\u8d25\u4f18\u5148\u3002\u8fd9\u4e00\u5212\u5206\u672c\u8eab\u662f\u5de5\u7a0b\u7ea6\u5b9a&#xff0c;\u5176\u8bba\u8bc1\u89c1 3.4\u3002<\/p>\n<hr \/>\n<h3>1.5 \u672c\u7ae0\u547d\u9898\u5c0f\u7ed3<\/h3>\n<table>\n<tr>\u7f16\u53f7\u547d\u9898<\/tr>\n<tbody>\n<tr>\n<td>P1.1<\/td>\n<td>\u6bcf\u4e2a\u7ec4\u4ef6\u6ee1\u8db3\u81ea\u8eab\u89c4\u683c&#xff0c;\u4e0d\u8574\u542b\u7aef\u5230\u7aef\u7ed3\u679c\u7b26\u5408\u610f\u56fe<\/td>\n<\/tr>\n<tr>\n<td>P1.2<\/td>\n<td>\u5728\u8fd0\u884c\u65f6\u786e\u5b9a\u8def\u5f84\u7684\u7cfb\u7edf\u4e2d&#xff0c;\u6267\u884c\u7f1d\u9699\u662f\u7ed3\u6784\u5e38\u6001&#xff0c;\u975e\u96c6\u6210\u7f3a\u9677<\/td>\n<\/tr>\n<tr>\n<td>P1.3<\/td>\n<td>\u5408\u6cd5\u4e3b\u4f53\u3001\u5408\u6cd5\u6743\u9650\u3001\u5408\u6cd5\u6d41\u7a0b\u7684\u7ec4\u5408\u4e0d\u6392\u9664\u9519\u8bef\u7684\u73b0\u5b9e\u7ed3\u679c<\/td>\n<\/tr>\n<tr>\n<td>P1.4<\/td>\n<td>\u672a\u8bbe\u7acb\u4ee5\u6700\u7ec8\u7ed3\u679c\u4e3a\u5bf9\u8c61\u7684\u72ec\u7acb\u8d23\u4efb\u4e3b\u4f53&#xff0c;\u5219\u65e0\u4eba\u5bf9\u6700\u7ec8\u7ed3\u679c\u8d1f\u8d23<\/td>\n<\/tr>\n<tr>\n<td>D1.3.1<\/td>\n<td>\u6267\u884c\u7f1d\u9699\u7684\u5b9a\u4e49<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u56db\u6761\u547d\u9898\u5171\u540c\u786e\u7acb\u4e86\u672c\u4e66\u7684\u95ee\u9898\u57df&#xff1a;\u9700\u8981\u88ab\u6cbb\u7406\u7684\u5bf9\u8c61\u4e0d\u662f\u4efb\u4f55\u5355\u4e2a\u8282\u70b9&#xff0c;\u800c\u662f\u8282\u70b9\u4e4b\u95f4\u7684\u8f6c\u6362\u5173\u7cfb&#xff1b;\u9700\u8981\u88ab\u5efa\u7acb\u7684\u673a\u5236\u4e0d\u662f\u66f4\u4e25\u683c\u7684\u7ec4\u4ef6\u89c4\u683c&#xff0c;\u800c\u662f\u4ee5\u6700\u7ec8\u6267\u884c\u5bf9\u8c61\u4e3a\u5224\u5b9a\u5bf9\u8c61\u7684\u72ec\u7acb\u88c1\u51b3\u3002\u7b2c 2 \u7ae0\u7ed9\u51fa\u8be5\u673a\u5236\u7684\u7ed3\u6784\u3002<\/p>\n<hr \/>\n<h2>\u7b2c 2 \u7ae0\u3000\u6267\u884c\u63a7\u5236 Execution Control<\/h2>\n<\/p>\n<h3>2.1 \u5224\u5b9a\u51fd\u6570\u4e0e\u63a7\u5236\u94fe<\/h3>\n<p>\u9898\u8bb0&#xff1a;\u5ba1\u8ba1\u544a\u8bc9\u4f60\u53d1\u751f\u4e86\u4ec0\u4e48\u3002\u6267\u884c\u63a7\u5236\u51b3\u5b9a\u5b83\u662f\u5426\u53d1\u751f\u3002<\/p>\n<hr \/>\n<h4>2.1.1 \u63a7\u5236\u7684\u5bf9\u8c61<\/h4>\n<p>&#034;\u63a7\u5236&#034;\u662f\u4e00\u4e2a\u88ab\u8fc7\u5ea6\u4f7f\u7528\u7684\u8bcd\u3002\u6743\u9650\u63a7\u5236\u3001\u8bbf\u95ee\u63a7\u5236\u3001\u6d41\u7a0b\u63a7\u5236\u3001\u8bbe\u5907\u63a7\u5236\u3001\u98ce\u9669\u63a7\u5236\u90fd\u53ef\u7b80\u79f0\u4e3a\u63a7\u5236&#xff0c;\u4f46\u5b83\u4eec\u5404\u81ea\u7ea6\u675f\u7684\u5bf9\u8c61\u4e0d\u540c&#xff1a;\u6743\u9650\u7ea6\u675f\u4e3b\u4f53\u7684\u80fd\u529b\u8303\u56f4&#xff0c;\u8bbf\u95ee\u7ea6\u675f\u8d44\u6e90\u7684\u53ef\u8fbe\u6027&#xff0c;\u6d41\u7a0b\u7ea6\u675f\u6b65\u9aa4\u7684\u987a\u5e8f\u3002\u6267\u884c\u63a7\u5236\u6240\u7ea6\u675f\u7684\u5bf9\u8c61\u662f\u552f\u4e00\u7684\u2014\u2014\u6700\u7ec8\u8fdb\u5165\u73b0\u5b9e\u7684\u90a3\u4e00\u4e2a\u52a8\u4f5c\u3002<\/p>\n<p>\u8fd9\u4e00\u5bf9\u8c61\u7684\u786e\u5b9a\u6027\u5e26\u6765\u4e00\u7ec4\u5177\u4f53\u7684\u5224\u5b9a\u5185\u5bb9\u3002\u6267\u884c\u63a7\u5236\u9700\u8981\u56de\u7b54\u7684\u4e0d\u662f&#034;\u8be5\u4e3b\u4f53\u662f\u5426\u6709\u6743\u505a\u8fd9\u7c7b\u4e8b&#034;&#xff0c;\u800c\u662f&#xff1a;\u5c06\u8981\u6267\u884c\u7684\u7cbe\u786e\u52a8\u4f5c\u662f\u4ec0\u4e48&#xff0c;\u4f5c\u7528\u4e8e\u54ea\u4e2a\u5bf9\u8c61&#xff0c;\u4f9d\u636e\u54ea\u4e9b\u4e8b\u5b9e&#xff0c;\u662f\u5426\u4e0e\u539f\u59cb\u610f\u56fe\u4fdd\u6301\u4e00\u81f4&#xff0c;\u88ab\u6279\u51c6\u7684\u662f\u5426\u4ecd\u662f\u5f53\u524d\u8fd9\u4e2a\u5bf9\u8c61&#xff0c;\u5f53\u524d\u72b6\u6001\u662f\u5426\u4ecd\u6ee1\u8db3\u5fc5\u8981\u6761\u4ef6&#xff0c;\u662f\u5426\u5b58\u5728\u8db3\u4ee5\u5426\u51b3\u7684\u5f02\u5e38\u3002<\/p>\n<p>\u5b9a\u4e49 D2.1.1&#xff08;\u6267\u884c\u63a7\u5236 \/ Execution Control&#xff09; \u5728\u73b0\u5b9e\u52a8\u4f5c\u53d1\u751f\u4e4b\u524d&#xff0c;\u5bf9\u610f\u56fe\u3001\u6700\u7ec8\u6267\u884c\u5bf9\u8c61\u3001\u6761\u4ef6\u3001\u8bc1\u636e\u53ca\u5176\u76f8\u4e92\u7ed1\u5b9a\u5173\u7cfb\u8fdb\u884c\u72ec\u7acb\u88c1\u51b3&#xff0c;\u5e76\u4ec5\u5728\u5b8c\u6574\u6761\u4ef6\u88ab\u8bc1\u660e\u6210\u7acb\u65f6\u91ca\u653e\u6267\u884c\u80fd\u529b\u7684\u4e00\u7ec4\u5de5\u7a0b\u673a\u5236\u3002<\/p>\n<p>\u5b9a\u4e49\u4e2d\u7684\u4e09\u4e2a\u9650\u5b9a\u8bcd\u5404\u81ea\u6392\u9664\u4e00\u7c7b\u5e38\u89c1\u8bef\u89e3&#xff1a;\u4e4b\u524d\u6392\u9664\u5ba1\u8ba1&#xff0c;\u72ec\u7acb\u6392\u9664\u81ea\u8bc1&#xff0c;\u8bc1\u660e\u6210\u7acb\u6392\u9664\u9ed8\u8ba4\u653e\u884c\u3002\u4ee5\u4e0b\u9010\u4e00\u8bf4\u660e\u3002<\/p>\n<hr \/>\n<h4>2.1.2 \u4e09\u9879\u533a\u5206\u6027\u8d28<\/h4>\n<p>\u6267\u884c\u63a7\u5236\u5e38\u88ab\u8bef\u8ba4\u4e3a\u5df2\u7531\u73b0\u6709\u673a\u5236\u63d0\u4f9b\u3002\u5c06\u5176\u4e0e\u5ba1\u8ba1\u3001\u6743\u9650\u3001\u6d41\u7a0b\u4e09\u8005\u5bf9\u7167&#xff0c;\u53ef\u89c1\u5176\u5224\u5b9a\u5c5e\u6027\u5747\u4e0d\u76f8\u540c\u3002<\/p>\n<p>\u8868 2-1\u3000\u6267\u884c\u63a7\u5236\u4e0e\u4e09\u7c7b\u65e2\u6709\u673a\u5236\u7684\u5224\u5b9a\u5c5e\u6027<\/p>\n<table>\n<tr>\u5224\u5b9a\u65f6\u70b9\u5224\u5b9a\u5bf9\u8c61\u5224\u5b9a\u7c92\u5ea6\u6709\u65e0\u963b\u65ad\u80fd\u529b<\/tr>\n<tbody>\n<tr>\n<td>\u5ba1\u8ba1<\/td>\n<td>\u52a8\u4f5c\u4e4b\u540e<\/td>\n<td>\u5df2\u53d1\u751f\u4e8b\u4ef6<\/td>\n<td>\u4e8b\u4ef6\u7ea7<\/td>\n<td>\u65e0<\/td>\n<\/tr>\n<tr>\n<td>\u6743\u9650<\/td>\n<td>\u52a8\u4f5c\u4e4b\u524d<\/td>\n<td>\u4e3b\u4f53\u4e0e\u64cd\u4f5c\u7c7b\u578b<\/td>\n<td>\u7c7b\u522b\u7ea7\u3001\u957f\u671f\u6709\u6548<\/td>\n<td>\u6709&#xff08;\u7c97\u7c92\u5ea6&#xff09;<\/td>\n<\/tr>\n<tr>\n<td>\u6d41\u7a0b\u5408\u89c4<\/td>\n<td>\u52a8\u4f5c\u4e4b\u524d<\/td>\n<td>\u6b65\u9aa4\u5b8c\u6574\u6027<\/td>\n<td>\u6d41\u7a0b\u7ea7<\/td>\n<td>\u6709&#xff08;\u5f62\u5f0f\u6027&#xff09;<\/td>\n<\/tr>\n<tr>\n<td>\u6267\u884c\u63a7\u5236<\/td>\n<td>\u80fd\u529b\u91ca\u653e\u4e4b\u524d<\/td>\n<td>\u6700\u7ec8\u6267\u884c\u5bf9\u8c61 &#043; \u8bc1\u636e\u96c6<\/td>\n<td>\u5355\u6b21\u52a8\u4f5c\u7ea7<\/td>\n<td>\u6709&#xff08;\u51b3\u5b9a\u6027&#xff09;<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u5176\u4e00&#xff0c;\u4f4d\u7f6e\u5728\u7ed3\u679c\u4e4b\u524d\u3002 \u5ba1\u8ba1\u8bb0\u5f55\u7cfb\u7edf\u505a\u4e86\u4ec0\u4e48\u3001\u7531\u8c01\u64cd\u4f5c\u3001\u662f\u5426\u6210\u529f&#xff0c;\u8fd9\u5bf9\u8ffd\u8d23\u4e0e\u590d\u76d8\u4e0d\u53ef\u66ff\u4ee3&#xff0c;\u4f46\u5b83\u65e0\u6cd5\u963b\u6b62\u5df2\u7ecf\u53d1\u751f\u7684\u52a8\u4f5c\u3002\u53ea\u80fd\u53d1\u51fa\u544a\u8b66\u800c\u4e0d\u80fd\u4e2d\u6b62\u6267\u884c\u7684\u7cfb\u7edf&#xff0c;\u5c5e\u4e8e\u76d1\u63a7\u7cfb\u7edf&#xff0c;\u4e0d\u5c5e\u4e8e\u63a7\u5236\u7cfb\u7edf\u3002\u6267\u884c\u63a7\u5236\u5fc5\u987b\u5904\u4e8e\u4e00\u4e2a\u7279\u5b9a\u4f4d\u7f6e&#xff1a;\u6761\u4ef6\u4e0d\u6210\u7acb\u65f6&#xff0c;\u73b0\u5b9e\u52a8\u4f5c\u4e0d\u80fd\u53d1\u751f&#xff08;\u516c\u7406 A5\u3001A10&#xff09;\u3002<\/p>\n<p>\u5176\u4e8c&#xff0c;\u5224\u5b9a\u5355\u6b21\u52a8\u4f5c\u800c\u975e\u957f\u671f\u8d44\u683c\u3002 \u6743\u9650\u901a\u5e38\u957f\u671f\u5b58\u5728\u2014\u2014\u8d26\u6237\u5728\u4e00\u6bb5\u65f6\u671f\u5185\u6301\u6709\u67d0\u9879\u80fd\u529b&#xff0c;\u670d\u52a1\u957f\u671f\u53ef\u8c03\u7528\u67d0\u63a5\u53e3\u3002\u6267\u884c\u63a7\u5236\u7684\u5224\u5b9a\u5219\u662f\u4e00\u6b21\u6027\u7684&#xff1a;\u8fd9\u4e00\u7b14\u3001\u8fd9\u4e00\u53f0\u3001\u8fd9\u4e00\u6b21\u3001\u8fd9\u7ec4\u53c2\u6570&#xff0c;\u5728\u5f53\u524d\u72b6\u6001\u4e0b\u662f\u5426\u5141\u8bb8\u3002\u540c\u4e00\u4e3b\u4f53\u7684\u540c\u7c7b\u64cd\u4f5c\u5728\u4e0d\u540c\u65f6\u523b\u53ef\u4ee5\u5f97\u5230\u4e0d\u540c\u7ed3\u679c\u3002\u6301\u6709\u8f6c\u8d26\u6743\u9650\u4e0d\u8574\u542b\u4efb\u4f55\u4e00\u7b14\u8f6c\u8d26\u90fd\u5e94\u88ab\u5141\u8bb8&#xff0c;\u56e0\u4e3a\u76ee\u6807\u8d26\u6237\u662f\u5426\u4e0e\u610f\u56fe\u7ed1\u5b9a\u3001\u91d1\u989d\u662f\u5426\u4e0e\u5ba1\u6279\u4e00\u81f4\u3001\u662f\u5426\u4ecd\u5728\u65f6\u95f4\u7a97\u53e3\u5185\u3001\u662f\u5426\u51fa\u73b0\u51b2\u7a81\u8bc1\u636e&#xff0c;\u90fd\u5c5e\u4e8e\u6743\u9650\u6a21\u578b\u4e0d\u8868\u8fbe\u7684\u4fe1\u606f&#xff08;\u516c\u7406 A9&#xff09;\u3002<\/p>\n<p>\u5176\u4e09&#xff0c;\u68c0\u67e5\u7ed3\u679c\u800c\u975e\u8fc7\u7a0b\u5916\u89c2\u3002 \u4e00\u6761\u6d41\u7a0b\u53ef\u4ee5\u5728\u5916\u89c2\u4e0a\u9ad8\u5ea6\u5b8c\u5907&#xff1a;\u591a\u56e0\u7d20\u8ba4\u8bc1\u3001\u4e09\u4eba\u5ba1\u6279\u3001\u52a0\u5bc6\u4f20\u8f93\u3001\u786c\u4ef6\u5bc6\u94a5\u7b7e\u540d\u3001\u5168\u7a0b\u7559\u75d5\u3002\u4f46\u82e5\u5ba1\u6279\u5bf9\u8c61\u4e0e\u7b7e\u540d\u5bf9\u8c61\u4e4b\u95f4\u4e0d\u5b58\u5728\u53ef\u9a8c\u8bc1\u7ed1\u5b9a&#xff0c;\u4e0a\u8ff0\u673a\u5236\u4fdd\u62a4\u7684\u53ea\u662f&#034;\u4e00\u4e2a\u9519\u8bef\u7ed3\u679c\u88ab\u987a\u5229\u5730\u5b8c\u6210&#034;\u3002\u6267\u884c\u63a7\u5236\u4e0d\u63a5\u53d7\u6d41\u7a0b\u5b8c\u6574\u6027\u4f5c\u4e3a\u653e\u884c\u4f9d\u636e&#xff0c;\u5b83\u7684\u5224\u636e\u662f\u6700\u7ec8\u6267\u884c\u5bf9\u8c61\u80fd\u5426\u7531\u5b8c\u6574\u8bc1\u636e\u8bc1\u6210&#xff08;\u516c\u7406 A3\u3001A7&#xff09;\u3002<\/p>\n<p>\u7531\u7b2c\u4e09\u9879\u76f4\u63a5\u5f97\u5230&#xff1a;<\/p>\n<p>\u547d\u9898 P2.1&#xff08;\u63a7\u5236\u6df1\u5ea6&#xff09; \u63a7\u5236\u70b9\u82e5\u4e0d\u8986\u76d6\u6700\u7ec8\u6267\u884c\u5bf9\u8c61&#xff0c;\u5219\u65e0\u6cd5\u5173\u95ed\u6267\u884c\u7f1d\u9699\u3002\u4ec5\u63a7\u5236\u610f\u56fe\u3001\u4ec5\u63a7\u5236\u5ba1\u6279\u3001\u6216\u4ec5\u63a7\u5236\u7b7e\u540d&#xff0c;\u5747\u4e0d\u6784\u6210\u6267\u884c\u63a7\u5236\u3002<\/p>\n<hr \/>\n<h4>2.1.3 \u5224\u5b9a\u51fd\u6570<\/h4>\n<p>\u5c06\u4e0a\u8ff0\u6027\u8d28\u5f62\u5f0f\u5316&#xff0c;\u6267\u884c\u63a7\u5236\u7684\u6838\u5fc3\u662f\u4e00\u4e2a\u5224\u5b9a\u51fd\u6570&#xff1a;<\/p>\n<p>\u0393 : (I, x, P, K, Ev, Ctx, t) \u2192 (d, \u03c0)<\/p>\n<p>\u0393 \u63a5\u6536\u610f\u56fe I\u3001\u5019\u9009\u6267\u884c\u5bf9\u8c61 x\u3001\u7b56\u7565 P\u3001\u5baa\u6cd5 K\u3001\u8bc1\u636e\u96c6 Ev\u3001\u4e0a\u4e0b\u6587 Ctx \u4e0e\u5224\u5b9a\u65f6\u523b t&#xff0c;\u8f93\u51fa\u51b3\u7b56 d \u2208 {ALLOW, DENY, SAFE_MODE} \u53ca\u5224\u5b9a\u8bc1\u660e \u03c0\u3002<\/p>\n<p>\u0393 \u987b\u6ee1\u8db3\u4e09\u9879\u6027\u8d28&#xff0c;\u5b83\u4eec\u540c\u65f6\u6784\u6210 Runtime \u5b9e\u73b0\u7684\u9a8c\u6536\u6807\u51c6&#xff1a;<\/p>\n<ul>\n<li>\u786e\u5b9a\u6027&#xff1a;\u76f8\u540c\u8f93\u5165\u4ea7\u751f\u76f8\u540c (d, \u03c0)\u3002\u8fd9\u6392\u9664\u4e86\u4ee5\u6982\u7387\u6a21\u578b\u5145\u5f53\u5224\u5b9a\u7ec4\u4ef6&#xff08;\u89c1 \u00a72.3.2&#xff09;\u3002<\/li>\n<li>\u5c01\u95ed\u6027&#xff1a;\u0393 \u4e0d\u8bfb\u53d6\u53c2\u6570\u4ee5\u5916\u7684\u9690\u5f0f\u72b6\u6001\u3002\u8fd9\u6392\u9664\u4e86&#034;\u4e0a\u5c42\u5df2\u7ecf\u5224\u65ad\u8fc7&#034;\u8fd9\u4e00\u7c7b\u9690\u542b\u524d\u63d0\u2014\u2014\u4e0a\u5c42\u63d0\u4ea4\u7684\u662f\u8bc1\u636e&#xff0c;\u4e0d\u662f\u7ed3\u8bba&#xff08;\u516c\u7406 A7&#xff09;\u3002<\/li>\n<li>\u5355\u8c03\u6536\u7f29\u6027&#xff1a;\u2200P&#xff0c;ALLOW(\u0393) \u2286 ALLOW(\u0393|P&#061;\u2205)\u3002\u7b56\u7565\u53ea\u80fd\u7f29\u5c0f\u653e\u884c\u96c6\u5408\u3002\u8fd9\u662f\u516c\u7406 A4 \u7684\u5f62\u5f0f\u8868\u8fbe\u3002<\/li>\n<\/ul>\n<p>\u8f93\u51fa\u4e3a\u4e09\u503c\u800c\u975e\u5e03\u5c14\u503c&#xff0c;\u662f\u56e0\u4e3a&#034;\u8bc1\u660e\u4e0d\u6210\u7acb&#034;\u4e0e&#034;\u8bc1\u660e\u6210\u7acb\u4e14\u7ed3\u8bba\u4e3a\u62d2\u7edd&#034;\u662f\u4e24\u79cd\u4e0d\u540c\u72b6\u6001&#xff0c;\u538b\u7f29\u540e\u5c06\u4e22\u5931\u8fd0\u7ef4\u6240\u9700\u7684\u533a\u5206&#xff08;\u8be6\u89c1 \u00a73.3&#xff09;\u3002<\/p>\n<hr \/>\n<h4>2.1.4 \u63a7\u5236\u94fe<\/h4>\n<p>\u5224\u5b9a\u51fd\u6570\u662f\u5355\u70b9\u89c6\u89d2\u3002\u5c06\u5176\u7f6e\u5165\u5b8c\u6574\u8def\u5f84&#xff0c;\u5f97\u5230\u6267\u884c\u63a7\u5236\u94fe\u3002<\/p>\n<p>\u56fe 2-1\u3000\u4ece\u610f\u56fe\u5230\u73b0\u5b9e\u7684\u63a7\u5236\u94fe<\/p>\n<p>  #mermaid-svg-W8KaEHm2DMEwOUW1{font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;font-size:16px;fill:#333;}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#mermaid-svg-W8KaEHm2DMEwOUW1 .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#mermaid-svg-W8KaEHm2DMEwOUW1 .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#mermaid-svg-W8KaEHm2DMEwOUW1 .error-icon{fill:#552222;}#mermaid-svg-W8KaEHm2DMEwOUW1 .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-W8KaEHm2DMEwOUW1 .edge-thickness-normal{stroke-width:1px;}#mermaid-svg-W8KaEHm2DMEwOUW1 .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-W8KaEHm2DMEwOUW1 .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-W8KaEHm2DMEwOUW1 .edge-thickness-invisible{stroke-width:0;fill:none;}#mermaid-svg-W8KaEHm2DMEwOUW1 .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-W8KaEHm2DMEwOUW1 .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-W8KaEHm2DMEwOUW1 .marker{fill:#333333;stroke:#333333;}#mermaid-svg-W8KaEHm2DMEwOUW1 .marker.cross{stroke:#333333;}#mermaid-svg-W8KaEHm2DMEwOUW1 svg{font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-W8KaEHm2DMEwOUW1 p{margin:0;}#mermaid-svg-W8KaEHm2DMEwOUW1 .label{font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;color:#333;}#mermaid-svg-W8KaEHm2DMEwOUW1 .cluster-label text{fill:#333;}#mermaid-svg-W8KaEHm2DMEwOUW1 .cluster-label span{color:#333;}#mermaid-svg-W8KaEHm2DMEwOUW1 .cluster-label span p{background-color:transparent;}#mermaid-svg-W8KaEHm2DMEwOUW1 .label text,#mermaid-svg-W8KaEHm2DMEwOUW1 span{fill:#333;color:#333;}#mermaid-svg-W8KaEHm2DMEwOUW1 .node rect,#mermaid-svg-W8KaEHm2DMEwOUW1 .node circle,#mermaid-svg-W8KaEHm2DMEwOUW1 .node ellipse,#mermaid-svg-W8KaEHm2DMEwOUW1 .node polygon,#mermaid-svg-W8KaEHm2DMEwOUW1 .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-svg-W8KaEHm2DMEwOUW1 .rough-node .label text,#mermaid-svg-W8KaEHm2DMEwOUW1 .node .label text,#mermaid-svg-W8KaEHm2DMEwOUW1 .image-shape .label,#mermaid-svg-W8KaEHm2DMEwOUW1 .icon-shape .label{text-anchor:middle;}#mermaid-svg-W8KaEHm2DMEwOUW1 .node .katex path{fill:#000;stroke:#000;stroke-width:1px;}#mermaid-svg-W8KaEHm2DMEwOUW1 .rough-node .label,#mermaid-svg-W8KaEHm2DMEwOUW1 .node .label,#mermaid-svg-W8KaEHm2DMEwOUW1 .image-shape .label,#mermaid-svg-W8KaEHm2DMEwOUW1 .icon-shape .label{text-align:center;}#mermaid-svg-W8KaEHm2DMEwOUW1 .node.clickable{cursor:pointer;}#mermaid-svg-W8KaEHm2DMEwOUW1 .root .anchor path{fill:#333333!important;stroke-width:0;stroke:#333333;}#mermaid-svg-W8KaEHm2DMEwOUW1 .arrowheadPath{fill:#333333;}#mermaid-svg-W8KaEHm2DMEwOUW1 .edgePath .path{stroke:#333333;stroke-width:2.0px;}#mermaid-svg-W8KaEHm2DMEwOUW1 .flowchart-link{stroke:#333333;fill:none;}#mermaid-svg-W8KaEHm2DMEwOUW1 .edgeLabel{background-color:rgba(232,232,232, 0.8);text-align:center;}#mermaid-svg-W8KaEHm2DMEwOUW1 .edgeLabel p{background-color:rgba(232,232,232, 0.8);}#mermaid-svg-W8KaEHm2DMEwOUW1 .edgeLabel rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#mermaid-svg-W8KaEHm2DMEwOUW1 .labelBkg{background-color:rgba(232, 232, 232, 0.5);}#mermaid-svg-W8KaEHm2DMEwOUW1 .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#mermaid-svg-W8KaEHm2DMEwOUW1 .cluster text{fill:#333;}#mermaid-svg-W8KaEHm2DMEwOUW1 .cluster span{color:#333;}#mermaid-svg-W8KaEHm2DMEwOUW1 div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#mermaid-svg-W8KaEHm2DMEwOUW1 .flowchartTitleText{text-anchor:middle;font-size:18px;fill:#333;}#mermaid-svg-W8KaEHm2DMEwOUW1 rect.text{fill:none;stroke-width:0;}#mermaid-svg-W8KaEHm2DMEwOUW1 .icon-shape,#mermaid-svg-W8KaEHm2DMEwOUW1 .image-shape{background-color:rgba(232,232,232, 0.8);text-align:center;}#mermaid-svg-W8KaEHm2DMEwOUW1 .icon-shape p,#mermaid-svg-W8KaEHm2DMEwOUW1 .image-shape p{background-color:rgba(232,232,232, 0.8);padding:2px;}#mermaid-svg-W8KaEHm2DMEwOUW1 .icon-shape .label rect,#mermaid-svg-W8KaEHm2DMEwOUW1 .image-shape .label rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#mermaid-svg-W8KaEHm2DMEwOUW1 .label-icon{display:inline-block;height:1em;overflow:visible;vertical-align:-0.125em;}#mermaid-svg-W8KaEHm2DMEwOUW1 .node .label-icon path{fill:currentColor;stroke:revert;stroke-width:revert;}#mermaid-svg-W8KaEHm2DMEwOUW1 :root{&#8211;mermaid-font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;} <\/p>\n<p>         <span class=\"edgeLabel\"><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>d &#061; ALLOW&#xff0c;\u91ca\u653e cap<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>d &#061; DENY<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>\u8bc1\u660e\u4e0d\u5b8c\u6574<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>x \/ Ev \/ Ctx \u53d8\u5316&#xff0c;A9 \u91cd\u88c1\u51b3<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>Intent\u5b9a\u4e49\u76ee\u6807\u4e0e\u4e0d\u53ef\u53d8\u7ea6\u675f I.inv<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>Policy\u5b9a\u4e49\u4e1a\u52a1\u5fc5\u8981\u6761\u4ef6<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>Approval\u7ed1\u5b9a hash(x)<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>Evidence\u8bc1\u660e\u6761\u4ef6\u5f53\u524d\u6210\u7acb<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>Candidate Execution x\u7cbe\u786e\u52a8\u4f5c\u5bf9\u8c61<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>Final Veto \/ \u0393\u786e\u5b9a\u6027\u88c1\u51b3<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>Execution\u73b0\u5b9e\u52a8\u4f5c<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>SAFE_MODE<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u62d2\u7edd<\/p>\n<p><\/span> <\/p>\n<p>\u8fd9\u6761\u94fe\u4e0e\u666e\u901a\u5de5\u4f5c\u6d41\u7684\u5dee\u522b\u5728\u4e8e\u4f20\u9012\u7269\u7684\u6027\u8d28\u3002\u5de5\u4f5c\u6d41\u9010\u7ea7\u4f20\u9012\u7ed3\u8bba&#xff1a;\u4e0a\u4e00\u73af\u8282\u5b8c\u6210&#xff0c;\u4e0b\u4e00\u73af\u8282\u636e\u6b64\u7ee7\u7eed\u3002\u63a7\u5236\u94fe\u9010\u7ea7\u5efa\u7acb\u53ef\u9a8c\u8bc1\u5173\u7cfb&#xff1a;\u610f\u56fe\u5b9a\u4e49\u76ee\u6807\u4e0e\u8fb9\u754c&#xff0c;\u7b56\u7565\u5b9a\u4e49\u5fc5\u8981\u6761\u4ef6&#xff0c;\u5ba1\u6279\u7ed1\u5b9a\u5177\u4f53\u5bf9\u8c61&#xff0c;\u8bc1\u636e\u8bc1\u660e\u6761\u4ef6\u5f53\u524d\u6210\u7acb&#xff0c;\u5019\u9009\u6267\u884c\u8868\u8fbe\u7cbe\u786e\u52a8\u4f5c&#xff0c;\u6700\u7ec8\u88c1\u51b3\u5bf9\u5168\u90e8\u5173\u7cfb\u4e00\u6b21\u6027\u6c42\u503c\u3002\u4efb\u4e00\u5173\u7cfb\u4e0d\u6210\u7acb&#xff0c;\u94fe\u6761\u4e0d\u4ea7\u751f ALLOW\u3002<\/p>\n<p>\u636e\u6b64&#xff0c;\u4e00\u4e2a\u5b8c\u6574\u7684\u6267\u884c\u63a7\u5236\u8fc7\u7a0b\u987b\u56de\u7b54\u4e94\u4e2a\u95ee\u9898&#xff0c;\u5b83\u4eec\u5206\u522b\u5bf9\u5e94\u94fe\u4e0a\u7684\u73af\u8282\u4e0e\u516c\u7406&#xff1a;<\/p>\n<p>\u8868 2-2\u3000\u63a7\u5236\u94fe\u7684\u4e94\u9879\u5224\u5b9a\u4e49\u52a1<\/p>\n<table>\n<tr>\u95ee\u9898\u94fe\u4e0a\u73af\u8282\u516c\u7406<\/tr>\n<tbody>\n<tr>\n<td>1<\/td>\n<td>\u610f\u56fe\u662f\u4ec0\u4e48<\/td>\n<td>Intent<\/td>\n<td>A1<\/td>\n<\/tr>\n<tr>\n<td>2<\/td>\n<td>\u6700\u7ec8\u5bf9\u8c61\u662f\u4ec0\u4e48<\/td>\n<td>Candidate Execution<\/td>\n<td>A2<\/td>\n<\/tr>\n<tr>\n<td>3<\/td>\n<td>\u4e8c\u8005\u5982\u4f55\u7ed1\u5b9a<\/td>\n<td>Intent Binding \/ Approval<\/td>\n<td>A2\u3001A3<\/td>\n<\/tr>\n<tr>\n<td>4<\/td>\n<td>\u5f53\u524d\u6761\u4ef6\u662f\u5426\u4ecd\u6210\u7acb<\/td>\n<td>Evidence<\/td>\n<td>A7\u3001A8\u3001A9<\/td>\n<\/tr>\n<tr>\n<td>5<\/td>\n<td>\u8c01\u62e5\u6709\u6700\u540e\u5426\u51b3\u6743<\/td>\n<td>Final Veto<\/td>\n<td>A5\u3001A6\u3001A10<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u672c\u7ae0\u5176\u4f59\u5404\u8282\u4f9d\u6b21\u5c55\u5f00\u7b2c 3 \u81f3\u7b2c 5 \u9879&#xff1a;\u00a72.2 \u5904\u7406\u610f\u56fe\u4e0e\u6700\u7ec8\u5bf9\u8c61\u7684\u7ed1\u5b9a&#xff0c;\u00a72.3 \u5904\u7406\u5426\u51b3\u6743\u7684\u5f52\u5c5e\u4e0e\u72ec\u7acb\u6027&#xff0c;\u00a72.4 \u5904\u7406\u5426\u51b3\u5728\u7269\u7406\u5c42\u7684\u751f\u6548\u65b9\u5f0f&#xff0c;\u00a72.5 \u5904\u7406\u6761\u4ef6\u6210\u7acb\u7684\u8bc1\u660e\u5f62\u5f0f\u3002<\/p>\n<p>\u3014\u8865\u3015\u5173\u4e8e\u56de\u8fb9\u7684\u8bf4\u660e\u3002 \u56fe 2-1 \u4e2d\u7531 Execution \u6307\u5411 \u0393 \u7684\u865a\u7ebf\u662f\u516c\u7406 A9 \u7684\u7ed3\u6784\u8868\u8fbe&#xff0c;\u539f\u7a3f\u672a\u663e\u5f0f\u7ed9\u51fa\u3002\u5b83\u610f\u5473\u7740\u63a7\u5236\u94fe\u4e0d\u662f\u6709\u5411\u65e0\u73af\u56fe&#xff1a;\u957f\u65f6\u6267\u884c\u3001\u5206\u6279\u6267\u884c\u4e0e\u6d41\u5f0f\u6267\u884c\u573a\u666f\u4e2d&#xff0c;Ctx \u5728\u6267\u884c\u8fc7\u7a0b\u4e2d\u6301\u7eed\u53d8\u5316&#xff0c;\u5355\u6b21\u88c1\u51b3\u7684\u6709\u6548\u6027\u5b58\u5728\u65f6\u95f4\u8fb9\u754c\u3002\u8be5\u8fb9\u754c\u7684\u786e\u5b9a\u5c5e\u4e8e\u5de5\u7a0b\u7ea6\u5b9a&#xff0c;\u672c\u4e66\u4e0d\u7ed9\u51fa\u901a\u7528\u53d6\u503c\u3002<\/p>\n<hr \/>\n<hr \/>\n<h3>2.2 \u610f\u56fe\u7ed1\u5b9a Intent Binding<\/h3>\n<p>\u9898\u8bb0&#xff1a;\u4e0a\u5c42\u6279\u51c6\u7684\u662f\u4e00\u79cd\u63cf\u8ff0&#xff0c;\u5e95\u5c42\u6267\u884c\u7684\u662f\u53e6\u4e00\u79cd\u5bf9\u8c61\u3002<\/p>\n<h4>2.2.1 \u610f\u56fe\u4e0e\u6267\u884c\u4e4b\u95f4\u7684\u4e09\u91cd\u8ddd\u79bb<\/h4>\n<p>\u516c\u7406 A2 \u65ad\u8a00 I \u2260 x&#xff0c;\u5176\u4f9d\u636e\u662f\u4e09\u9879\u5f7c\u6b64\u72ec\u7acb\u7684\u6027\u8d28\u3002<\/p>\n<p>\u5176\u4e00&#xff0c;\u610f\u56fe\u5929\u7136\u4e0d\u5b8c\u6574\u3002 &#034;\u628a\u8fd9\u7b14\u6b3e\u4ed8\u6389&#034;\u672a\u6307\u660e\u8d26\u6237\u3001\u7f51\u7edc\u3001\u5e01\u79cd\u3001\u624b\u7eed\u8d39\u4e0a\u9650\u4e0e\u622a\u6b62\u65f6\u95f4&#xff1b;&#034;\u6062\u590d\u670d\u52a1\u5668&#034;\u672a\u6307\u660e\u5141\u8bb8\u91cd\u542f\u7684\u670d\u52a1\u3001\u662f\u5426\u53ef\u4e22\u5931\u5f53\u524d\u4efb\u52a1\u3001\u662f\u5426\u5141\u8bb8\u5207\u6362\u5907\u7528\u8282\u70b9&#xff1b;&#034;\u6253\u5f00\u4ed3\u5e93&#034;\u6d89\u53ca\u8eab\u4efd\u3001\u65f6\u6bb5\u3001\u533a\u57df\u3001\u8bbe\u5907\u72b6\u6001\u4e0e\u73b0\u573a\u4eba\u5458\u7b49\u591a\u9879\u672a\u8a00\u660e\u7684\u6761\u4ef6\u3002\u7f3a\u5931\u90e8\u5206\u5fc5\u7136\u7531\u4e0b\u6e38\u8865\u5168&#xff0c;\u8865\u5168\u7ed3\u679c\u4e0d\u53d7\u539f\u59cb\u8868\u8ff0\u7ea6\u675f\u3002<\/p>\n<p>\u5176\u4e8c&#xff0c;\u540c\u4e00\u610f\u56fe\u5bf9\u5e94\u591a\u4e2a\u6267\u884c\u65b9\u6848\u3002 \u652f\u4ed8\u53ef\u7ecf\u7531\u4e0d\u540c\u7f51\u7edc\u3001\u4e0d\u540c\u624b\u7eed\u8d39\u7b56\u7565\u3001\u4e0d\u540c\u7ed3\u7b97\u65f6\u70b9\u5b8c\u6210&#xff1b;\u8bbe\u5907\u6062\u590d\u53ef\u7ecf\u7531\u91cd\u542f\u3001\u5207\u6362\u5907\u7528\u8282\u70b9\u6216\u964d\u7ea7\u8fd0\u884c\u8fbe\u6210\u3002\u65b9\u6848\u4e4b\u95f4\u5728\u6210\u672c\u3001\u98ce\u9669\u4e0e\u4e0d\u53ef\u9006\u7a0b\u5ea6\u4e0a\u5dee\u5f02\u663e\u8457&#xff0c;\u800c\u610f\u56fe\u672c\u8eab\u4e0d\u533a\u5206\u5b83\u4eec\u3002<\/p>\n<p>\u5176\u4e09&#xff0c;\u610f\u56fe\u5728\u94fe\u4e0a\u88ab\u53cd\u590d\u8f6c\u6362\u3002 \u4ece\u81ea\u7136\u8bed\u8a00\u5230\u7ed3\u6784\u5316\u8bf7\u6c42&#xff0c;\u5230\u7b56\u7565\u8f93\u5165&#xff0c;\u5230\u5ba1\u6279\u5bf9\u8c61&#xff0c;\u5230\u6700\u7ec8 Payload&#xff0c;\u5230\u6267\u884c\u5bf9\u8c61\u2014\u2014\u6bcf\u4e00\u6b21\u8f6c\u6362\u90fd\u662f\u4e00\u6b21\u91cd\u65b0\u8868\u8fbe&#xff0c;\u6bcf\u4e00\u6b21\u91cd\u65b0\u8868\u8fbe\u90fd\u662f\u4e00\u6b21\u53ef\u80fd\u7684\u504f\u79fb\u70b9&#xff08;\u56fe 1-1&#xff09;\u3002<\/p>\n<p>\u4e09\u8005\u5171\u540c\u51b3\u5b9a&#xff1a;\u610f\u56fe\u4e0d\u80fd\u4f5c\u4e3a\u6267\u884c\u7684\u76f4\u63a5\u4f9d\u636e&#xff0c;\u53ea\u80fd\u4f5c\u4e3a\u6267\u884c\u7684\u7ea6\u675f\u6765\u6e90\u3002<\/p>\n<h4>2.2.2 \u610f\u56fe\u5bf9\u8c61\u4e0e\u4e0d\u53d8\u91cf\u96c6<\/h4>\n<p>\u82e5\u610f\u56fe\u4ec5\u5b58\u5728\u4e8e\u5bf9\u8bdd\u8bb0\u5f55\u3001\u4f1a\u8bae\u7eaa\u8981\u6216\u4f7f\u7528\u8005\u7684\u8ba4\u77e5\u4e2d&#xff0c;\u5b83\u65e0\u6cd5\u53c2\u4e0e\u88c1\u51b3\u3002\u6267\u884c\u63a7\u5236\u8981\u6c42\u610f\u56fe\u88ab\u56fa\u5316\u4e3a\u53ef\u54c8\u5e0c\u3001\u53ef\u7b7e\u540d\u3001\u53ef\u5f15\u7528\u3001\u53ef\u5ba1\u8ba1\u7684\u5bf9\u8c61\u3002<\/p>\n<p>\u5b9a\u4e49 D2.2.1&#xff08;\u610f\u56fe\u5bf9\u8c61 \/ Intent Object&#xff09; \u8868\u8fbe\u671f\u671b\u53d1\u751f\u4ec0\u4e48\u5e76\u643a\u5e26\u7ea6\u675f\u7684\u53ef\u9a8c\u8bc1\u7ed3\u6784&#xff0c;\u81f3\u5c11\u5305\u542b&#xff1a;\u610f\u56fe\u6807\u8bc6\u3001\u53d1\u8d77\u4e3b\u4f53\u3001\u76ee\u6807\u5bf9\u8c61\u3001\u64cd\u4f5c\u7c7b\u578b\u3001\u5fc5\u8981\u7ea6\u675f\u3001\u5141\u8bb8\u8303\u56f4\u3001\u7981\u6b62\u6761\u4ef6\u3001\u6709\u6548\u65f6\u95f4\u3001\u8bc1\u636e\u8981\u6c42\u3001\u5ba1\u6279\u8981\u6c42\u3001\u53ef\u63a5\u53d7\u7684\u6267\u884c\u7ed3\u679c\u3002\u540e\u7eed\u6240\u6709\u7b56\u7565\u6c42\u503c\u3001\u5ba1\u6279\u4e0e\u6267\u884c&#xff0c;\u987b\u5f15\u7528\u540c\u4e00\u610f\u56fe\u5bf9\u8c61\u6216\u5176\u65e0\u6b67\u4e49\u6d3e\u751f\u5bf9\u8c61\u3002<\/p>\n<p>\u4e00\u79cd\u76f4\u89c9\u7684\u7ed1\u5b9a\u65b9\u6cd5\u662f\u4fdd\u5b58\u539f\u59cb\u63d0\u793a\u8bcd\u4e0e\u6700\u7ec8\u547d\u4ee4\u5e76\u6bd4\u8f83\u4e8c\u8005\u3002\u8be5\u65b9\u6cd5\u4e0d\u53ef\u884c&#xff1a;\u81ea\u7136\u8bed\u8a00\u610f\u56fe\u4e0e\u673a\u5668\u6307\u4ee4\u4e0d\u5904\u4e8e\u540c\u4e00\u8868\u8fbe\u5c42\u3002&#034;\u5411\u4f9b\u5e94\u5546\u652f\u4ed8\u5408\u540c\u5c3e\u6b3e&#034;\u5bf9\u5e94\u4e00\u6bb5\u7ed3\u6784\u5316\u4ea4\u6613\u6570\u636e&#xff0c;\u4e00\u4e2a\u8bbe\u5907\u64cd\u4f5c\u76ee\u6807\u5bf9\u5e94\u591a\u6761\u4f4e\u5c42\u63a7\u5236\u547d\u4ee4&#xff0c;\u4e24\u8005\u4e4b\u95f4\u4e0d\u5b58\u5728\u6587\u672c\u5c42\u9762\u7684\u53ef\u6bd4\u6027\u3002\u6587\u672c\u76f8\u4f3c\u5ea6\u65e2\u4e0d\u5145\u5206\u4e5f\u4e0d\u5fc5\u8981\u3002<\/p>\n<p>\u53ef\u884c\u7684\u505a\u6cd5\u662f\u5b9a\u4e49\u54ea\u4e9b\u5c5e\u6027\u5fc5\u987b\u5728\u5168\u90e8\u8f6c\u6362\u4e2d\u4fdd\u6301\u4e0d\u53d8&#xff0c;\u5373\u610f\u56fe\u7684\u4e0d\u53d8\u91cf\u96c6 I.inv&#xff1a;<\/p>\n<p>I.inv &#061; {\u6267\u884c\u5bf9\u8c61, \u6570\u91cf\u6216\u91d1\u989d, \u65f6\u95f4\u7a97\u53e3, \u76ee\u6807\u7cfb\u7edf, \u98ce\u9669\u7b49\u7ea7,<br \/>\n         \u5141\u8bb8\u7684\u65b9\u6cd5, \u7981\u6b62\u6761\u4ef6, \u5ba1\u6279\u8303\u56f4, \u6700\u7ec8\u8f7d\u8377\u6458\u8981}<\/p>\n<p>\u7cfb\u7edf\u65e0\u987b\u8bc1\u660e\u4e2d\u95f4\u8868\u8fbe\u9010\u5b57\u76f8\u540c&#xff0c;\u53ea\u987b\u8bc1\u660e I.inv \u4e2d\u6bcf\u4e00\u9879\u4ece\u8d77\u70b9\u5ef6\u7eed\u81f3\u7ec8\u70b9\u3002<\/p>\n<p>\u5b9a\u4e49 D2.2.2&#xff08;\u610f\u56fe\u7ed1\u5b9a \/ Intent Binding&#xff09; \u5019\u9009\u6267\u884c\u5bf9\u8c61 x \u4e0e\u610f\u56fe\u5bf9\u8c61 I \u4e4b\u95f4\u7684\u53ef\u9a8c\u8bc1\u5173\u7cfb&#xff0c;\u6ee1\u8db3&#xff1a;x \u7684\u5bf9\u5e94\u5c5e\u6027\u5728 I.inv \u7684\u6bcf\u4e00\u9879\u4e0a\u4e0e I \u4e00\u81f4&#xff0c;\u4e14\u8be5\u4e00\u81f4\u6027\u53ef\u7531 \u03c0 \u91cd\u653e\u9a8c\u8bc1\u3002\u4efb\u4e00\u9879\u4e0d\u4e00\u81f4&#xff0c;\u7ed1\u5b9a\u5931\u8d25\u3002<\/p>\n<p>\u56fe 2-2\u3000\u610f\u56fe\u7ed1\u5b9a\u7684\u9a8c\u8bc1\u5173\u7cfb<\/p>\n<p>  #mermaid-svg-LhWCr7uyhygGPOHt{font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;font-size:16px;fill:#333;}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#mermaid-svg-LhWCr7uyhygGPOHt .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#mermaid-svg-LhWCr7uyhygGPOHt .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#mermaid-svg-LhWCr7uyhygGPOHt .error-icon{fill:#552222;}#mermaid-svg-LhWCr7uyhygGPOHt .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-LhWCr7uyhygGPOHt .edge-thickness-normal{stroke-width:1px;}#mermaid-svg-LhWCr7uyhygGPOHt .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-LhWCr7uyhygGPOHt .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-LhWCr7uyhygGPOHt .edge-thickness-invisible{stroke-width:0;fill:none;}#mermaid-svg-LhWCr7uyhygGPOHt .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-LhWCr7uyhygGPOHt .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-LhWCr7uyhygGPOHt .marker{fill:#333333;stroke:#333333;}#mermaid-svg-LhWCr7uyhygGPOHt .marker.cross{stroke:#333333;}#mermaid-svg-LhWCr7uyhygGPOHt svg{font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-LhWCr7uyhygGPOHt p{margin:0;}#mermaid-svg-LhWCr7uyhygGPOHt .label{font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;color:#333;}#mermaid-svg-LhWCr7uyhygGPOHt .cluster-label text{fill:#333;}#mermaid-svg-LhWCr7uyhygGPOHt .cluster-label span{color:#333;}#mermaid-svg-LhWCr7uyhygGPOHt .cluster-label span p{background-color:transparent;}#mermaid-svg-LhWCr7uyhygGPOHt .label text,#mermaid-svg-LhWCr7uyhygGPOHt span{fill:#333;color:#333;}#mermaid-svg-LhWCr7uyhygGPOHt .node rect,#mermaid-svg-LhWCr7uyhygGPOHt .node circle,#mermaid-svg-LhWCr7uyhygGPOHt .node ellipse,#mermaid-svg-LhWCr7uyhygGPOHt .node polygon,#mermaid-svg-LhWCr7uyhygGPOHt .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-svg-LhWCr7uyhygGPOHt .rough-node .label text,#mermaid-svg-LhWCr7uyhygGPOHt .node .label text,#mermaid-svg-LhWCr7uyhygGPOHt .image-shape .label,#mermaid-svg-LhWCr7uyhygGPOHt .icon-shape .label{text-anchor:middle;}#mermaid-svg-LhWCr7uyhygGPOHt .node .katex path{fill:#000;stroke:#000;stroke-width:1px;}#mermaid-svg-LhWCr7uyhygGPOHt .rough-node .label,#mermaid-svg-LhWCr7uyhygGPOHt .node .label,#mermaid-svg-LhWCr7uyhygGPOHt .image-shape .label,#mermaid-svg-LhWCr7uyhygGPOHt .icon-shape .label{text-align:center;}#mermaid-svg-LhWCr7uyhygGPOHt .node.clickable{cursor:pointer;}#mermaid-svg-LhWCr7uyhygGPOHt .root .anchor path{fill:#333333!important;stroke-width:0;stroke:#333333;}#mermaid-svg-LhWCr7uyhygGPOHt .arrowheadPath{fill:#333333;}#mermaid-svg-LhWCr7uyhygGPOHt .edgePath .path{stroke:#333333;stroke-width:2.0px;}#mermaid-svg-LhWCr7uyhygGPOHt .flowchart-link{stroke:#333333;fill:none;}#mermaid-svg-LhWCr7uyhygGPOHt .edgeLabel{background-color:rgba(232,232,232, 0.8);text-align:center;}#mermaid-svg-LhWCr7uyhygGPOHt .edgeLabel p{background-color:rgba(232,232,232, 0.8);}#mermaid-svg-LhWCr7uyhygGPOHt .edgeLabel rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#mermaid-svg-LhWCr7uyhygGPOHt .labelBkg{background-color:rgba(232, 232, 232, 0.5);}#mermaid-svg-LhWCr7uyhygGPOHt .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#mermaid-svg-LhWCr7uyhygGPOHt .cluster text{fill:#333;}#mermaid-svg-LhWCr7uyhygGPOHt .cluster span{color:#333;}#mermaid-svg-LhWCr7uyhygGPOHt div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#mermaid-svg-LhWCr7uyhygGPOHt .flowchartTitleText{text-anchor:middle;font-size:18px;fill:#333;}#mermaid-svg-LhWCr7uyhygGPOHt rect.text{fill:none;stroke-width:0;}#mermaid-svg-LhWCr7uyhygGPOHt .icon-shape,#mermaid-svg-LhWCr7uyhygGPOHt .image-shape{background-color:rgba(232,232,232, 0.8);text-align:center;}#mermaid-svg-LhWCr7uyhygGPOHt .icon-shape p,#mermaid-svg-LhWCr7uyhygGPOHt .image-shape p{background-color:rgba(232,232,232, 0.8);padding:2px;}#mermaid-svg-LhWCr7uyhygGPOHt .icon-shape .label rect,#mermaid-svg-LhWCr7uyhygGPOHt .image-shape .label rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#mermaid-svg-LhWCr7uyhygGPOHt .label-icon{display:inline-block;height:1em;overflow:visible;vertical-align:-0.125em;}#mermaid-svg-LhWCr7uyhygGPOHt .node .label-icon path{fill:currentColor;stroke:revert;stroke-width:revert;}#mermaid-svg-LhWCr7uyhygGPOHt :root{&#8211;mermaid-font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;} <\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>\u7ea6\u675f<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>\u5f15\u7528<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>\u6458\u8981<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>\u9010\u9879\u6821\u9a8c I.inv<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>\u5426<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u610f\u56fe\u5bf9\u8c61 Ihash(I), I.inv<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u5ba1\u6279\u7ed1\u5b9a hash(x)<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u5019\u9009\u6267\u884c x<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u0393<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u7ed1\u5b9a\u6210\u7acb<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>DENY \/ \u91cd\u65b0\u5ba1\u6279<\/p>\n<p><\/span> <\/p>\n<p>\u7ed1\u5b9a\u5931\u8d25\u7684\u5224\u5b9a\u662f\u9010\u9879\u7684&#xff0c;\u4e14\u4e0d\u63a5\u53d7\u8fd1\u4f3c\u3002\u539f\u59cb\u610f\u56fe\u6279\u51c6\u5411\u8d26\u6237 A \u652f\u4ed8 10 \u4e07\u5143&#xff1a;\u76ee\u6807\u53d8\u4e3a\u8d26\u6237 B&#xff0c;\u7ed1\u5b9a\u5931\u8d25&#xff1b;\u91d1\u989d\u53d8\u4e3a 11 \u4e07\u5143&#xff0c;\u7ed1\u5b9a\u5931\u8d25&#xff1b;\u7f51\u7edc\u7531\u6d4b\u8bd5\u73af\u5883\u53d8\u4e3a\u751f\u4ea7\u73af\u5883&#xff0c;\u7ed1\u5b9a\u5931\u8d25&#xff1b;\u5ba1\u6279\u5df2\u8fc7\u671f&#xff0c;\u7ed1\u5b9a\u5931\u8d25&#xff1b;Payload \u91cd\u65b0\u751f\u6210\u5bfc\u81f4\u6458\u8981\u53d8\u5316&#xff0c;\u7ed1\u5b9a\u5931\u8d25\u3002\u6b64\u5904\u7684\u4e25\u683c\u6027\u662f\u523b\u610f\u7684\u2014\u2014\u7ed1\u5b9a\u673a\u5236\u7684\u5168\u90e8\u4f5c\u7528&#xff0c;\u5c31\u662f\u963b\u6b62&#034;\u4e0a\u5c42\u6279\u51c6\u4e00\u79cd\u63cf\u8ff0\u3001\u5e95\u5c42\u6267\u884c\u53e6\u4e00\u79cd\u5bf9\u8c61&#034;\u8fd9\u4e00\u7ed3\u6784\u3002<\/p>\n<h4>2.2.3 \u610f\u56fe\u4e0d\u6784\u6210\u5145\u5206\u6761\u4ef6<\/h4>\n<p>\u610f\u56fe\u4e3a\u771f\u4e0d\u8574\u542b\u6267\u884c\u5e94\u5f53\u53d1\u751f\u3002\u73b0\u5b9e\u72b6\u6001\u6301\u7eed\u53d8\u5316&#xff0c;\u6628\u65e5\u5408\u7406\u7684\u52a8\u4f5c\u4eca\u65e5\u53ef\u80fd\u5df2\u4e0d\u5408\u7406&#xff1a;\u4f9b\u5e94\u5546\u8d26\u6237\u5df2\u66f4\u6362&#xff0c;\u8bbe\u5907\u8fdb\u5165\u7ef4\u62a4\u72b6\u6001&#xff0c;\u98ce\u9669\u7b49\u7ea7\u53d8\u5316&#xff0c;\u76ee\u6807\u5bf9\u8c61\u88ab\u64a4\u9500&#xff0c;\u6cd5\u89c4\u6761\u4ef6\u6539\u53d8&#xff0c;\u5ba1\u6279\u8005\u79bb\u804c&#xff0c;\u65f6\u95f4\u7a97\u53e3\u7ed3\u675f&#xff0c;\u73af\u5883\u8bc1\u636e\u5931\u6548\u3002<\/p>\n<p>\u547d\u9898 P2.2&#xff08;\u610f\u56fe\u7684\u5fc5\u8981\u975e\u5145\u5206\u6027&#xff09; \u610f\u56fe\u5bf9\u8c61\u7684\u5b58\u5728\u4e0e\u7ed1\u5b9a\u6210\u7acb&#xff0c;\u662f d &#061; ALLOW \u7684\u5fc5\u8981\u6761\u4ef6&#xff0c;\u4e0d\u662f\u5145\u5206\u6761\u4ef6\u3002\u6267\u884c\u524d\u987b\u53e6\u884c\u786e\u8ba4\u8be5\u610f\u56fe\u5728\u5f53\u524d Ctx \u4e0e t \u4e0b\u4ecd\u7136\u6709\u6548\u3002<\/p>\n<p>P2.2 \u4e0e\u516c\u7406 A9 \u5171\u540c\u6392\u9664\u4e86\u4e00\u79cd\u5e38\u89c1\u8bbe\u8ba1&#xff1a;\u5c06\u4e00\u6b21\u610f\u56fe\u786e\u8ba4\u89c6\u4e3a\u4e00\u6bb5\u65f6\u671f\u5185\u7684\u901a\u884c\u8bc1\u3002\u610f\u56fe\u662f\u5224\u5b9a\u7684\u8d77\u70b9&#xff0c;\u4e0d\u662f\u5224\u5b9a\u7684\u7ed3\u8bba\u3002<\/p>\n<hr \/>\n<hr \/>\n<h3>2.3 \u6700\u7ec8\u5426\u51b3\u6743&#xff08;Final Veto&#xff09;<\/h3>\n<h4>2.3.1 \u7ed3\u6784\u6027\u504f\u5411\u4e0e\u5426\u51b3\u804c\u8d23\u7684\u7f3a\u4f4d<\/h4>\n<p>\u6267\u884c\u94fe\u4e0a\u7684\u7ec4\u4ef6\u2014\u2014\u4e1a\u52a1\u7cfb\u7edf\u3001Agent \u7f16\u6392\u5668\u3001\u5de5\u4f5c\u6d41\u5f15\u64ce\u3001\u5ba1\u6279\u7cfb\u7edf\u3001\u7b7e\u540d\u670d\u52a1\u3001\u7ec8\u7aef\u8bbe\u5907\u2014\u2014\u5728\u8bbe\u8ba1\u76ee\u6807\u4e0a\u5747\u4ee5&#034;\u63a8\u52a8\u52a8\u4f5c\u5b8c\u6210&#034;\u4e3a\u4f18\u5316\u65b9\u5411\u3002\u4e1a\u52a1\u7cfb\u7edf\u4ee5\u4efb\u52a1\u5b8c\u6210\u7387\u8861\u91cf&#xff0c;\u7f16\u6392\u5668\u4ee5\u76ee\u6807\u8fbe\u6210\u7387\u8861\u91cf&#xff0c;\u5ba1\u6279\u7cfb\u7edf\u4ee5\u6d41\u7a0b\u95ed\u73af\u7387\u8861\u91cf&#xff0c;\u7b7e\u540d\u670d\u52a1\u4ee5\u8bf7\u6c42\u54cd\u5e94\u6210\u529f\u7387\u8861\u91cf\u3002\u8fd9\u4e00\u5171\u540c\u503e\u5411\u5e76\u975e\u5b9e\u73b0\u7f3a\u9677&#xff0c;\u800c\u662f\u5404\u7ec4\u4ef6\u804c\u8d23\u5b9a\u4e49\u7684\u76f4\u63a5\u7ed3\u679c\u3002\u5176\u540e\u679c\u662f&#xff1a;\u5728\u4e00\u6761\u5b8c\u6574\u6267\u884c\u94fe\u4e0a&#xff0c;\u53ef\u80fd\u4e0d\u5b58\u5728\u4efb\u4f55\u4e00\u4e2a\u4ee5&#034;\u963b\u6b62\u52a8\u4f5c&#034;\u4e3a\u9996\u8981\u804c\u8d23\u7684\u7ec4\u4ef6\u3002<\/p>\n<p>\u7531\u6b64\u4ea7\u751f\u4e00\u4e2a\u7ed3\u6784\u6027\u5224\u65ad&#xff1a;\u82e5\u7cfb\u7edf\u4e2d\u7684\u6bcf\u4e00\u5c42\u90fd\u53ea\u5177\u5907&#034;\u653e\u884c&#034;\u8fd9\u4e00\u6709\u6548\u8f93\u51fa&#xff0c;\u5219\u8be5\u7cfb\u7edf\u4e0d\u5b58\u5728\u8fb9\u754c\u3002\u5206\u6563\u5728\u5404\u5c42\u7684\u62d2\u7edd\u80fd\u529b\u2014\u2014\u53c2\u6570\u6821\u9a8c\u5931\u8d25\u3001\u4f59\u989d\u4e0d\u8db3\u3001\u6d41\u7a0b\u8d85\u65f6\u2014\u2014\u5747\u5c5e\u4e8e\u529f\u80fd\u6027\u62d2\u7edd&#xff0c;\u5b83\u4eec\u670d\u52a1\u4e8e\u4e1a\u52a1\u6b63\u786e\u6027&#xff0c;\u800c\u975e\u6267\u884c\u5b89\u5168\u6027&#xff1b;\u8fd9\u7c7b\u62d2\u7edd\u5728\u6761\u4ef6\u88ab\u6ee1\u8db3\u6216\u88ab\u91cd\u8bd5\u6d88\u89e3\u540e\u5373\u81ea\u52a8\u8ba9\u4f4d\u4e8e\u653e\u884c\u3002\u6267\u884c\u63a7\u5236\u6240\u8981\u6c42\u7684\u662f\u53e6\u4e00\u7c7b\u80fd\u529b&#xff1a;\u4e00\u79cd\u72ec\u7acb\u4e8e\u4e1a\u52a1\u6210\u529f\u4e0e\u5426\u3001\u4ee5&#034;\u8bc1\u660e\u4e0d\u6210\u7acb\u5373\u62d2\u7edd&#034;\u4e3a\u552f\u4e00\u5224\u636e\u7684\u8f93\u51fa\u3002<\/p>\n<p>\u5b9a\u4e49 2.3.1&#xff08;\u6700\u7ec8\u5426\u51b3\u6743 \/ Final Veto&#xff09; \u5728\u5019\u9009\u6267\u884c x \u83b7\u5f97\u8de8\u8d8a\u6267\u884c\u8fb9\u754c\u7684\u5fc5\u8981\u80fd\u529b\u4e4b\u524d&#xff0c;\u7531\u72ec\u7acb\u4e8e x \u751f\u6210\u65b9\u7684\u5224\u5b9a\u7ec4\u4ef6\u6240\u6301\u6709\u7684\u62d2\u7edd\u80fd\u529b\u3002\u8be5\u80fd\u529b\u6ee1\u8db3\u4e09\u9879\u6761\u4ef6&#xff1a;(a) \u5224\u5b9a\u53d1\u751f\u5728\u6700\u7ec8\u52a8\u4f5c\u4e4b\u524d\u4e14\u4e0d\u53ef\u8df3\u8fc7&#xff1b;(b) \u8f93\u51fa\u7684\u975e ALLOW \u7ed3\u679c\u4e0d\u53ef\u88ab\u4e0a\u5c42\u7ec4\u4ef6\u8986\u76d6\u3001\u91cd\u8bd5\u6216\u91cd\u65b0\u89e3\u91ca&#xff1b;\u00a9 \u5224\u5b9a\u6240\u4f9d\u636e\u7684\u8f93\u5165\u5305\u542b\u6700\u7ec8\u6267\u884c\u5bf9\u8c61\u672c\u8eab&#xff0c;\u800c\u975e\u5176\u4e0a\u6e38\u63cf\u8ff0\u3002<\/p>\n<p>Final Veto \u7684\u804c\u8d23\u8fb9\u754c\u662f\u72ed\u7a84\u7684&#xff1a;\u5b83\u4e0d\u63d0\u51fa\u66ff\u4ee3\u65b9\u6848&#xff0c;\u4e0d\u4f18\u5316\u6d41\u7a0b&#xff0c;\u4e0d\u7406\u89e3\u4e1a\u52a1\u8bed\u4e49\u3002\u5176\u552f\u4e00\u547d\u9898\u662f\u5224\u65ad\u5f53\u524d\u6761\u4ef6\u662f\u5426\u6784\u6210 ALLOW \u7684\u5b8c\u6574\u8bc1\u660e&#xff08;\u516c\u7406 A8&#xff09;\u3002\u8fd9\u4e00\u72ed\u7a84\u6027\u662f\u8bbe\u8ba1\u76ee\u6807\u800c\u975e\u80fd\u529b\u5c40\u9650\u2014\u2014\u5224\u5b9a\u7ec4\u4ef6\u627f\u62c5\u7684\u8bed\u4e49\u8d8a\u5c11&#xff0c;\u5176\u884c\u4e3a\u7684\u786e\u5b9a\u6027\u8d8a\u9ad8&#xff0c;\u53ef\u88ab\u8bf1\u5bfc\u7684\u8868\u9762\u8d8a\u5c0f\u3002<\/p>\n<h4>2.3.2 \u4e0e\u4f20\u7edf\u6388\u6743\u673a\u5236\u7684\u6bd4\u8f83\u5206\u6790<\/h4>\n<p>\u5ba1\u6279\u3001\u6570\u5b57\u7b7e\u540d\u4e0e\u6a21\u578b\u5224\u65ad\u4e09\u8005\u5e38\u88ab\u5f53\u4f5c\u6267\u884c\u94fe\u7684&#034;\u6700\u540e\u4e00\u9053\u5173\u5361&#034;\u3002\u4ee5\u5b9a\u4e49 2.3.1 \u7684\u4e09\u9879\u6761\u4ef6\u9010\u4e00\u6838\u9a8c&#xff0c;\u53ef\u89c1\u4e09\u8005\u5747\u4e0d\u6ee1\u8db3\u3002<\/p>\n<p>&#xff08;\u4e00&#xff09;\u5ba1\u6279&#xff1a;\u65f6\u5e8f\u7f3a\u9677\u3002 \u5ba1\u6279\u5177\u5907\u62d2\u7edd\u80fd\u529b&#xff0c;\u4f46\u5176\u53d1\u751f\u4f4d\u7f6e\u901a\u5e38\u5904\u4e8e\u6d41\u7a0b\u4e2d\u6bb5\u3002\u5ba1\u6279\u5b8c\u6210\u4e4b\u540e&#xff0c;\u6267\u884c\u5bf9\u8c61\u4ecd\u53ef\u80fd\u88ab\u91cd\u65b0\u751f\u6210\u3001\u53c2\u6570\u88ab\u8865\u5168\u3001\u8def\u7531\u88ab\u6539\u5199\u3001\u7cfb\u7edf\u72b6\u6001\u88ab\u53d8\u66f4\u3002\u5f53\u5ba1\u6279\u4eba\u6240\u62d2\u7edd\u6216\u6279\u51c6\u7684\u662f\u4e00\u6bb5\u4e1a\u52a1\u63cf\u8ff0&#xff0c;\u800c\u6700\u7ec8\u6267\u884c\u7cfb\u7edf\u6240\u63a5\u6536\u7684\u662f\u4e00\u4e2a\u7cbe\u786e\u5bf9\u8c61\u65f6&#xff0c;\u4e24\u8005\u4e4b\u95f4\u4e0d\u5b58\u5728\u53ef\u9a8c\u8bc1\u7684\u5bf9\u5e94\u5173\u7cfb&#xff0c;\u5ba1\u6279\u7684\u6388\u6743\u8bed\u4e49\u56e0\u800c\u65e0\u6cd5\u5ef6\u4f38\u81f3\u6700\u7ec8\u52a8\u4f5c&#xff08;\u516c\u7406 A3&#xff09;\u3002\u5ba1\u6279\u7684\u5931\u6548\u4e0d\u5728\u4e8e\u5176\u5224\u65ad\u8d28\u91cf&#xff0c;\u800c\u5728\u4e8e\u5176\u5224\u65ad\u5bf9\u8c61\u4e0e\u6267\u884c\u5bf9\u8c61\u4e4b\u95f4\u7684\u65f6\u5e8f\u9519\u4f4d\u3002<\/p>\n<p>&#xff08;\u4e8c&#xff09;\u6570\u5b57\u7b7e\u540d&#xff1a;\u8bed\u4e49\u7f3a\u9677\u3002 \u7b7e\u540d\u673a\u5236\u56de\u7b54\u7684\u547d\u9898\u662f&#034;\u67d0\u79c1\u94a5\u662f\u5426\u540c\u610f\u7b7e\u7f72\u8fd9\u6bb5\u6570\u636e&#034;\u3002\u8be5\u547d\u9898\u4e0d\u8574\u542b&#034;\u8fd9\u6bb5\u6570\u636e\u662f\u5426\u7b26\u5408\u539f\u59cb\u610f\u56fe&#034;\u201c\u53c2\u6570\u662f\u5426\u5728\u4f20\u9012\u4e2d\u88ab\u66ff\u6362\u201d\u201c\u76ee\u6807\u8d26\u6237\u662f\u5426\u6b63\u786e\u201d\u201c\u5f53\u524d\u7cfb\u7edf\u72b6\u6001\u662f\u5426\u4ecd\u7136\u5b89\u5168\u201d\u201c\u8bc1\u636e\u96c6\u5408\u662f\u5426\u5b8c\u6574\u201d&#034;\u662f\u5426\u5b58\u5728\u76f8\u4e92\u77db\u76fe\u7684\u8bc1\u636e&#034;\u8fd9\u516d\u9879\u5224\u65ad\u4e2d\u7684\u4efb\u4f55\u4e00\u9879\u3002\u82e5\u7b7e\u540d\u6a21\u5757\u4ec5\u5bf9\u4e0a\u5c42\u63d0\u4ea4\u7684 Payload \u6267\u884c\u7b7e\u7f72&#xff0c;\u5b83\u5728\u529f\u80fd\u4e0a\u662f\u6267\u884c\u94fe\u7684\u6700\u540e\u4e00\u9053\u6280\u672f\u624b\u7eed&#xff0c;\u800c\u975e\u6700\u540e\u4e00\u9053\u5224\u65ad\u3002<\/p>\n<p>\u547d\u9898 P2.4&#xff08;\u7b7e\u540d\u4e0d\u6784\u6210\u5426\u51b3&#xff09; \u8bbe\u7b7e\u540d\u51fd\u6570 Sign(k, m) \u7684\u5224\u5b9a\u57df\u4ec5\u4e3a\u5bc6\u94a5 k \u7684\u6301\u6709\u72b6\u6001&#xff0c;\u5219\u5bf9\u4efb\u610f x&#xff0c;Sign \u65e0\u6cd5\u533a\u5206 x \u662f\u5426\u6ee1\u8db3 I.inv\u3002\u56e0\u6b64\u5728 A2 \u4e0e A3 \u4e4b\u4e0b&#xff0c;Sign \u4e0d\u6ee1\u8db3\u5b9a\u4e49 2.3.1\u00a9&#xff0c;\u4e0d\u6784\u6210 Final Veto\u3002 \u63a8\u8bba C2.4&#xff1a;Final Veto \u5fc5\u987b\u4f4d\u4e8e\u7b7e\u540d\u6216\u6267\u884c\u80fd\u529b\u6388\u4e88\u4e4b\u524d&#xff0c;\u5e76\u6709\u6743\u62d2\u7edd\u63d0\u4f9b\u8be5\u80fd\u529b\u3002<\/p>\n<p>&#xff08;\u4e09&#xff09;\u6a21\u578b\u5224\u65ad&#xff1a;\u786e\u5b9a\u6027\u7f3a\u9677\u3002 AI \u7ec4\u4ef6\u53ef\u6709\u6548\u53c2\u4e0e\u5f02\u5e38\u53d1\u73b0\u3001\u98ce\u9669\u5206\u6790\u4e0e\u65b9\u6848\u6bd4\u8f83&#xff0c;\u8fd9\u7c7b\u80fd\u529b\u5c5e\u4e8e\u4e0a\u5c42\u5224\u65ad&#xff0c;\u4ef7\u503c\u660e\u786e\u3002\u4f46 Final Veto \u8981\u6c42\u540c\u4e00\u89c4\u5219\u4e0e\u540c\u4e00\u8f93\u5165\u4ea7\u751f\u540c\u4e00\u7ed3\u679c&#xff08;\u0393 \u7684\u786e\u5b9a\u6027\u6027\u8d28&#xff0c;\u89c1 2.1&#xff09;\u3002\u57fa\u4e8e\u6982\u7387\u8f93\u51fa\u7684\u7ec4\u4ef6\u5176\u884c\u4e3a\u53ef\u88ab\u4e0a\u4e0b\u6587\u6539\u5199\u3001\u88ab\u63d0\u793a\u8bcd\u8bf1\u5bfc\u3001\u88ab\u63aa\u8f9e\u5f71\u54cd&#xff1b;\u5728\u5173\u952e\u6761\u4ef6\u7f3a\u5931\u65f6&#xff0c;\u5b83\u53ef\u80fd\u7ed9\u51fa&#034;\u914c\u60c5\u5224\u65ad&#034;&#xff0c;\u5728\u8bc1\u636e\u51b2\u7a81\u65f6&#xff0c;\u5b83\u53ef\u80fd\u901a\u8fc7\u8bed\u8a00\u5c42\u9762\u7684\u89e3\u91ca\u6d88\u89e3\u77db\u76fe\u3002\u8fd9\u4e24\u79cd\u884c\u4e3a\u6070\u597d\u8fdd\u53cd\u516c\u7406 A8 \u6240\u8981\u6c42\u7684\u4fdd\u5b88\u95ed\u5408\u3002\u56e0\u6b64&#xff0c;\u6a21\u578b\u53ef\u4ee5\u53c2\u4e0e\u5224\u65ad&#xff0c;\u4f46\u4e0d\u5e94\u6301\u6709\u6700\u540e\u8fb9\u754c\u3002<\/p>\n<table>\n<tr>\u673a\u5236\u5224\u5b9a\u5bf9\u8c61\u5224\u5b9a\u65f6\u70b9\u7ed3\u679c\u53ef\u5426\u88ab\u8986\u76d6\u786e\u5b9a\u6027\u662f\u5426\u6ee1\u8db3\u5b9a\u4e49 2.3.1<\/tr>\n<tbody>\n<tr>\n<td>\u5ba1\u6279<\/td>\n<td>\u4e1a\u52a1\u63cf\u8ff0<\/td>\n<td>\u6d41\u7a0b\u4e2d\u6bb5<\/td>\n<td>\u53ef&#xff08;\u540e\u7eed\u91cd\u751f\u6210&#xff09;<\/td>\n<td>\u9ad8<\/td>\n<td>\u5426&#xff08;\u8fdd\u53cd a\u3001c&#xff09;<\/td>\n<\/tr>\n<tr>\n<td>\u6570\u5b57\u7b7e\u540d<\/td>\n<td>\u5b57\u8282\u5e8f\u5217<\/td>\n<td>\u6267\u884c\u524d<\/td>\n<td>\u5426<\/td>\n<td>\u9ad8<\/td>\n<td>\u5426&#xff08;\u8fdd\u53cd c&#xff09;<\/td>\n<\/tr>\n<tr>\n<td>\u6a21\u578b\u5224\u65ad<\/td>\n<td>\u81ea\u7136\u8bed\u8a00\u8bed\u5883<\/td>\n<td>\u4efb\u610f<\/td>\n<td>\u53ef&#xff08;\u91cd\u8bd5&#xff0f;\u6539\u5199\u63d0\u793a&#xff09;<\/td>\n<td>\u4f4e<\/td>\n<td>\u5426&#xff08;\u8fdd\u53cd b&#xff09;<\/td>\n<\/tr>\n<tr>\n<td>Final Veto<\/td>\n<td>\u6700\u7ec8\u6267\u884c\u5bf9\u8c61 &#043; \u8bc1\u636e\u96c6<\/td>\n<td>\u80fd\u529b\u6388\u4e88\u524d<\/td>\n<td>\u5426<\/td>\n<td>\u9ad8<\/td>\n<td>\u662f<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u8868 2-4\u3000\u4e09\u7c7b\u4f20\u7edf\u673a\u5236\u4e0e Final Veto \u7684\u5224\u5b9a\u5c5e\u6027\u5bf9\u6bd4<\/p>\n<h4>2.3.3 \u72ec\u7acb\u6027\u8981\u6c42<\/h4>\n<p>\u82e5\u6700\u7ec8\u5426\u51b3\u6743\u7531\u88ab\u63a7\u5236\u7684\u7cfb\u7edf\u81ea\u8eab\u63d0\u4f9b&#xff0c;\u8be5\u5426\u51b3\u4e0e\u88ab\u5426\u51b3\u5bf9\u8c61\u5904\u4e8e\u540c\u4e00\u4fe1\u4efb\u57df&#xff0c;\u4e00\u65e6\u8be5\u57df\u88ab\u653b\u9677&#xff0c;\u5426\u51b3\u80fd\u529b\u4e0e\u6267\u884c\u80fd\u529b\u540c\u65f6\u5931\u6548\u3002\u4ee5\u4e0b\u7ed3\u6784\u5747\u5c5e\u4e8e\u6b64\u7c7b\u540c\u57df\u914d\u7f6e&#xff1a;SaaS \u65e2\u751f\u6210\u8bf7\u6c42\u53c8\u88c1\u51b3\u8bf7\u6c42&#xff1b;\u7ba1\u7406\u5458\u65e2\u914d\u7f6e\u89c4\u5219\u53c8\u53ef\u5173\u95ed\u89c4\u5219&#xff1b;Agent \u65e2\u4ea7\u751f\u6267\u884c\u5bf9\u8c61\u53c8\u9a8c\u8bc1\u8be5\u5bf9\u8c61&#xff1b;\u94b1\u5305\u65e2\u5c55\u793a\u4ea4\u6613\u6458\u8981\u53c8\u76f4\u63a5\u7b7e\u7f72 Payload&#xff1b;\u8bbe\u5907\u4e3b\u63a7\u65e2\u63a5\u6536\u7f51\u7edc\u6307\u4ee4\u53c8\u51b3\u5b9a\u662f\u5426\u6267\u884c\u3002\u8fd9\u4e9b\u914d\u7f6e\u4e2d\u7684&#034;\u62d2\u7edd&#034;\u5728\u5f62\u5f0f\u4e0a\u5b58\u5728&#xff0c;\u5728\u5bf9\u6297\u6761\u4ef6\u4e0b\u4e0d\u6210\u7acb&#xff08;\u516c\u7406 A6&#xff09;\u3002<\/p>\n<p>\u636e\u6b64&#xff0c;Final Veto \u7684\u72ec\u7acb\u6027\u987b\u5728\u516d\u4e2a\u7ef4\u5ea6\u4e0a\u5206\u522b\u6210\u7acb&#xff1a;\u6267\u884c\u8def\u5f84\u72ec\u7acb\u3001\u72b6\u6001\u5224\u65ad\u72ec\u7acb\u3001\u89c4\u5219\u6765\u6e90\u72ec\u7acb\u3001\u5bc6\u94a5\u6216\u80fd\u529b\u63a7\u5236\u72ec\u7acb\u3001\u65e5\u5fd7\u4e0e\u8bc1\u636e\u72ec\u7acb\u3001\u6545\u969c\u6a21\u5f0f\u72ec\u7acb\u3002\u5176\u4e2d\u6545\u969c\u6a21\u5f0f\u72ec\u7acb\u6700\u6613\u88ab\u5ffd\u7565&#xff1a;\u82e5\u5224\u5b9a\u7ec4\u4ef6\u4e0e\u88ab\u5224\u5b9a\u7cfb\u7edf\u5171\u4eab\u540c\u4e00\u4f9b\u7535\u3001\u540c\u4e00\u65f6\u949f\u6e90\u6216\u540c\u4e00\u7f51\u7edc\u901a\u9053&#xff0c;\u5219\u4e00\u6b21\u5171\u56e0\u6545\u969c\u5373\u53ef\u540c\u65f6\u6d88\u9664\u4e24\u8005&#xff0c;\u72ec\u7acb\u6027\u5728\u6545\u969c\u57df\u4e0a\u5e76\u4e0d\u6210\u7acb\u3002<\/p>\n<p>\u72ec\u7acb\u4e0d\u7b49\u4e8e\u5b64\u7acb\u3002\u5224\u5b9a\u7ec4\u4ef6\u53ef\u4ee5\u63a5\u6536\u4e0a\u5c42\u63d0\u4f9b\u7684\u4fe1\u606f&#xff0c;\u4f46\u4e0d\u5f97\u5c06\u4e0a\u5c42\u7ed3\u8bba\u76f4\u63a5\u91c7\u7eb3\u4e3a\u4e8b\u5b9e\u2014\u2014\u4e0a\u5c42\u63d0\u4ea4\u7684\u662f\u8bc1\u636e&#xff0c;\u800c\u975e\u5224\u65ad\u3002\u8fd9\u4e00\u533a\u5206\u662f 2.5 \u8282 Evidence \u6a21\u578b\u7684\u76f4\u63a5\u524d\u63d0\u3002<\/p>\n<h4>2.3.4 \u8f93\u51fa\u57df\u4e0e\u9ed8\u8ba4\u6001\u5ea6<\/h4>\n<p>\u6267\u884c\u7cfb\u7edf\u7684\u72b6\u6001\u7a7a\u95f4\u4e0d\u6b62\u4e8e&#034;\u5141\u8bb8&#034;\u4e0e&#034;\u62d2\u7edd&#034;\u3002\u5f53\u8bc1\u636e\u7f3a\u5931\u3001\u8fc7\u671f\u6216\u76f8\u4e92\u51b2\u7a81\u65f6&#xff0c;\u7cfb\u7edf\u6240\u5904\u7684\u5e76\u975e&#034;\u62d2\u7edd&#034;&#xff0c;\u800c\u662f&#034;\u65e0\u6cd5\u5b8c\u6210\u8bc1\u660e&#034;\u3002\u5c06\u8fd9\u4e24\u7c7b\u72b6\u6001\u538b\u7f29\u4e3a\u540c\u4e00\u4e2a\u5e03\u5c14\u503c&#xff0c;\u4f1a\u4f7f\u8fd0\u7ef4\u4fa7\u4e22\u5931\u533a\u5206\u8865\u4ea4\u8bc1\u636e\u3001\u91cd\u65b0\u7b7e\u53d1\u4e0e\u4eba\u5de5\u88c1\u5b9a\u7684\u4f9d\u636e&#xff08;\u8be6\u89c1 3.3&#xff09;\u3002\u56e0\u6b64 Final Veto \u7684\u8f93\u51fa\u57df\u5b9a\u4e49\u4e3a {ALLOW, DENY, SAFE_MODE}&#xff0c;\u5e76\u9644\u5e26\u5224\u5b9a\u8bc1\u660e \u03c0\u3002<\/p>\n<p>\u5de5\u7a0b\u7ea6\u5b9a E2.3&#xff08;\u9ed8\u8ba4\u6001\u5ea6&#xff09; \u5224\u5b9a\u7ec4\u4ef6\u7684\u9ed8\u8ba4\u8f93\u51fa\u4e3a\u975e ALLOW\u3002ALLOW \u4ec5\u5728\u5b58\u5728\u5b8c\u6574\u8bc1\u660e \u03c0 \u65f6\u4ea7\u751f\u3002\u8be5\u7ea6\u5b9a\u662f\u8bbe\u8ba1\u9009\u62e9&#xff0c;\u5176\u4ee3\u4ef7\u662f\u53ef\u7528\u6027\u4e0b\u964d&#xff1b;\u5176\u6b63\u5f53\u6027\u4f9d\u636e\u5728\u4e8e 3.4 \u6240\u8bba\u8bc1\u7684\u4ee3\u4ef7\u4e0d\u5bf9\u79f0\u6027&#xff0c;\u800c\u975e\u903b\u8f91\u5fc5\u7136\u3002<\/p>\n<p>\u9700\u8981\u660e\u786e\u7684\u662f&#xff0c;Final Veto \u4e0d\u627f\u8bfa\u5224\u65ad\u6b63\u786e\u3002\u5b83\u627f\u8bfa\u7684\u662f\u4e00\u9879\u5f31\u5f97\u591a\u3001\u4f46\u53ef\u9a8c\u8bc1\u7684\u6027\u8d28&#xff1a;\u5728\u8bc1\u660e\u4e0d\u6210\u7acb\u65f6&#xff0c;\u73b0\u5b9e\u52a8\u4f5c\u4e0d\u4f1a\u53d1\u751f\u3002\u8fd9\u4e00\u6027\u8d28\u53ef\u88ab\u6d4b\u8bd5\u3001\u53ef\u88ab\u5ba1\u8ba1\u3001\u53ef\u88ab\u5f62\u5f0f\u5316\u9648\u8ff0&#xff0c;\u800c&#034;\u5224\u65ad\u6c38\u8fdc\u6b63\u786e&#034;\u4e0d\u80fd\u3002\u5bfc\u8bba\u91c7\u7528\u524d\u8005\u4f5c\u4e3a\u5de5\u7a0b\u76ee\u6807&#xff0c;\u6b63\u662f\u56e0\u4e3a\u540e\u8005\u4e0d\u53ef\u4ea4\u4ed8\u3002<\/p>\n<hr \/>\n<hr \/>\n<h3>2.4 \u7269\u7406\u4fe1\u4efb\u8fb9\u754c<\/h3>\n<p>\u9898\u8bb0&#xff1a;\u786c\u4ef6\u7684\u4ef7\u503c\u4e0d\u53ea\u662f\u4fdd\u62a4\u5bc6\u94a5&#xff0c;\u800c\u662f\u4fdd\u62a4\u4e0d\u80fd\u53d1\u751f\u7684\u4e8b\u60c5\u3002<\/p>\n<h4>2.4.1 \u7075\u6d3b\u6027\u4e0e\u786e\u5b9a\u6027\u7684\u5206\u5c42<\/h4>\n<p>\u8f6f\u4ef6\u7684\u4f18\u52bf\u5728\u4e8e\u7075\u6d3b&#xff1a;\u53ef\u8fdc\u7a0b\u5347\u7ea7\u3001\u52a8\u6001\u914d\u7f6e\u3001\u5feb\u901f\u6269\u5c55\u3001\u9002\u5e94\u4e1a\u52a1\u53d8\u5316\u3002\u5b89\u5168\u5173\u952e\u8fb9\u754c\u6240\u9700\u7684\u5c5e\u6027\u6070\u597d\u76f8\u53cd&#xff1a;\u884c\u4e3a\u786e\u5b9a\u3001\u653b\u51fb\u9762\u5c0f\u3001\u96be\u4ee5\u4fee\u6539\u3001\u4e0d\u53ef\u88ab\u8fdc\u7a0b\u8bf4\u670d\u3001\u6545\u969c\u6a21\u5f0f\u53ef\u9884\u6d4b\u3001\u5173\u952e\u7ea6\u675f\u4e0d\u53ef\u5173\u95ed\u3002\u4e24\u7ec4\u5c5e\u6027\u5b58\u5728\u7ed3\u6784\u6027\u5f20\u529b&#xff0c;\u5c06\u5b83\u4eec\u7f6e\u4e8e\u540c\u4e00\u5c42&#xff0c;\u901a\u5e38\u5f97\u5230\u4e00\u4e2a\u65e2\u4e0d\u591f\u7075\u6d3b\u4e5f\u4e0d\u591f\u5b89\u5168\u7684\u7cfb\u7edf\u3002<\/p>\n<p>\u6267\u884c\u63a7\u5236\u56e0\u6b64\u91c7\u53d6\u5206\u5c42\u7b56\u7565&#xff1a;\u590d\u6742\u6027\u7559\u5728\u4e0a\u5c42&#xff0c;\u786e\u5b9a\u6027\u4e0b\u6c89\u5230\u8fb9\u754c\u3002 \u4e0a\u5c42\u627f\u62c5\u7406\u89e3\u3001\u89c4\u5212\u3001\u7f16\u6392\u4e0e\u4f18\u5316&#xff0c;\u8fb9\u754c\u53ea\u627f\u62c5\u4e00\u9879\u72ed\u7a84\u804c\u8d23\u2014\u2014\u5728\u8bc1\u660e\u4e0d\u6210\u7acb\u65f6\u4e0d\u91ca\u653e\u80fd\u529b\u3002<\/p>\n<h4>2.4.2 \u5b9a\u4e49\u4e0e\u5224\u636e<\/h4>\n<p>\u5b9a\u4e49 D2.4.1&#xff08;\u7269\u7406\u4fe1\u4efb\u8fb9\u754c \/ Physical Trust Boundary&#xff09; \u7531\u72ec\u7acb\u786c\u4ef6\u57df\u72ec\u5360\u67d0\u9879\u73b0\u5b9e\u52a8\u4f5c\u5fc5\u8981\u80fd\u529b\u6240\u6784\u6210\u7684\u6267\u884c\u8fb9\u754c&#xff0c;\u6ee1\u8db3&#xff1a;(a) \u5173\u952e\u6267\u884c\u80fd\u529b\u4f4d\u4e8e\u8be5\u57df\u5185&#xff1b;(b) \u4e0a\u5c42\u8f6f\u4ef6\u4e0d\u80fd\u7ed5\u8fc7\u5176\u88c1\u51b3\u76f4\u63a5\u5b8c\u6210\u6267\u884c&#xff1b;\u00a9 \u8fb9\u754c\u53ef\u72ec\u7acb\u4f5c\u51fa\u62d2\u7edd&#xff1b;(d) \u5173\u952e\u89c4\u5219\u4e0d\u53ef\u7531\u666e\u901a\u7ba1\u7406\u5458\u5173\u95ed&#xff1b;(e) \u5173\u952e\u5bc6\u94a5\u6216\u63a7\u5236\u80fd\u529b\u4e0d\u5411\u4e0a\u5c42\u66b4\u9732&#xff1b;(f) \u8fb9\u754c\u80fd\u591f\u9a8c\u8bc1\u5bf9\u8c61\u3001\u72b6\u6001\u4e0e\u8bc1\u636e&#xff1b;(g) \u88c1\u51b3\u7ed3\u679c\u88ab\u72ec\u7acb\u8bb0\u5f55\u3002<\/p>\n<p>&#034;\u4f7f\u7528\u786c\u4ef6&#034;\u4e0d\u7b49\u4e8e\u5177\u5907\u7269\u7406\u4fe1\u4efb\u8fb9\u754c\u3002\u4e00\u4e2a\u53ef\u88ab\u8fdc\u7a0b\u66f4\u65b0\u3001\u5b8c\u5168\u63a5\u53d7\u4e3b\u673a\u547d\u4ee4\u3001\u4e0d\u4f5c\u72ec\u7acb\u72b6\u6001\u5224\u65ad\u7684\u786c\u4ef6\u6a21\u5757&#xff0c;\u5728\u67b6\u6784\u4e0a\u4ecd\u662f\u8f6f\u4ef6\u7cfb\u7edf\u7684\u5916\u63a5\u6267\u884c\u5668&#xff0c;\u5176\u4fe1\u4efb\u57df\u4e0e\u4e0a\u5c42\u540c\u4e00&#xff0c;\u56e0\u800c\u4e0d\u6ee1\u8db3\u516c\u7406 A6\u3002<\/p>\n<p>\u547d\u9898 P2.3&#xff08;\u5bc6\u94a5\u4fdd\u62a4\u4e0d\u7b49\u4e8e\u6267\u884c\u4fdd\u62a4&#xff09; \u82e5\u786c\u4ef6\u6a21\u5757\u4ec5\u5bf9\u4e0a\u5c42\u63d0\u4ea4\u7684 Payload \u6267\u884c\u7b7e\u540d&#xff0c;\u5219\u5176\u4fdd\u62a4\u5bf9\u8c61\u4e3a\u5bc6\u94a5\u800c\u975e\u6267\u884c\u3002\u6b64\u7c7b\u6a21\u5757\u964d\u4f4e\u5bc6\u94a5\u6cc4\u9732\u98ce\u9669&#xff0c;\u4f46\u4e0d\u964d\u4f4e\u9519\u8bef\u6267\u884c\u98ce\u9669\u3002<\/p>\n<p>\u7531 P2.3 \u53ef\u77e5&#xff0c;\u786c\u4ef6\u5b89\u5168\u6a21\u5757\u3001\u786c\u4ef6\u94b1\u5305\u4e0e\u5b89\u5168\u82af\u7247\u7684\u65e2\u6709\u90e8\u7f72&#xff0c;\u4e0d\u81ea\u52a8\u6784\u6210\u6267\u884c\u8fb9\u754c\u3002\u4f7f\u5176\u6784\u6210\u8fb9\u754c&#xff0c;\u987b\u4ee4\u5176\u8fdb\u4e00\u6b65\u56de\u7b54&#xff1a;\u5f53\u524d Payload \u662f\u5426\u4e0e\u610f\u56fe\u7ed1\u5b9a&#xff0c;\u662f\u5426\u4e0e\u5ba1\u6279\u5bf9\u8c61\u4e00\u81f4&#xff0c;\u5fc5\u8981\u8bc1\u636e\u662f\u5426\u5b8c\u6574&#xff0c;\u65f6\u95f4\u4e0e\u72b6\u6001\u662f\u5426\u6709\u6548&#xff0c;\u662f\u5426\u89e6\u53d1\u56fa\u5b9a\u9650\u5236&#xff0c;\u662f\u5426\u5b58\u5728\u5426\u51b3\u6761\u4ef6\u3002<\/p>\n<h4>2.4.3 \u5fc5\u8981\u80fd\u529b<\/h4>\n<p>\u8fb9\u754c\u7684\u63a7\u5236\u529b\u6765\u81ea\u5176\u5bf9\u67d0\u9879\u5fc5\u8981\u80fd\u529b cap \u7684\u72ec\u5360\u3002\u53ef\u4f5c\u4e3a cap \u7684\u80fd\u529b\u5305\u62ec&#xff1a;\u6700\u7ec8\u7b7e\u540d\u5bc6\u94a5\u3001\u8bbe\u5907\u542f\u52a8\u4fe1\u53f7\u3001\u7535\u6e90\u63a7\u5236\u3001\u6267\u884c\u4ee4\u724c\u3001\u5173\u952e\u901a\u4fe1\u901a\u9053\u3001\u4e0d\u53ef\u66ff\u4ee3\u7684\u6388\u6743\u8bc1\u660e\u3001\u6700\u7ec8\u547d\u4ee4\u89e3\u5bc6\u80fd\u529b\u3002<\/p>\n<p>\u5224\u636e\u662f\u5355\u4e00\u7684&#xff1a;\u82e5\u4e0a\u5c42\u7cfb\u7edf\u53ef\u7ed5\u5f00\u8fb9\u754c\u76f4\u63a5\u5b8c\u6210\u6267\u884c&#xff0c;\u5219\u8be5\u8fb9\u754c\u662f\u8f85\u52a9\u7ec4\u4ef6\u800c\u975e\u8fb9\u754c\u3002\u516c\u7406 A10 \u7684\u5de5\u7a0b\u542b\u4e49\u5373\u5728\u4e8e\u6b64\u2014\u2014\u8fb9\u754c\u987b\u6210\u4e3a\u6267\u884c\u94fe\u7684\u5fc5\u8981\u8282\u70b9&#xff0c;\u4f7f\u5f97 d \u2260 ALLOW \u21d2 \u52a8\u4f5c\u4e0d\u53ef\u53d1\u751f\u3002<\/p>\n<p>\u56fe 2-3\u3000\u6267\u884c\u63a7\u5236\u7684\u5206\u5c42\u4e0e\u80fd\u529b\u5f52\u5c5e<\/p>\n<p>  #mermaid-svg-NHdIwalUZnhZBQes{font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;font-size:16px;fill:#333;}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#mermaid-svg-NHdIwalUZnhZBQes .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#mermaid-svg-NHdIwalUZnhZBQes .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#mermaid-svg-NHdIwalUZnhZBQes .error-icon{fill:#552222;}#mermaid-svg-NHdIwalUZnhZBQes .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-NHdIwalUZnhZBQes .edge-thickness-normal{stroke-width:1px;}#mermaid-svg-NHdIwalUZnhZBQes .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-NHdIwalUZnhZBQes .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-NHdIwalUZnhZBQes .edge-thickness-invisible{stroke-width:0;fill:none;}#mermaid-svg-NHdIwalUZnhZBQes .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-NHdIwalUZnhZBQes .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-NHdIwalUZnhZBQes .marker{fill:#333333;stroke:#333333;}#mermaid-svg-NHdIwalUZnhZBQes .marker.cross{stroke:#333333;}#mermaid-svg-NHdIwalUZnhZBQes svg{font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-NHdIwalUZnhZBQes p{margin:0;}#mermaid-svg-NHdIwalUZnhZBQes .label{font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;color:#333;}#mermaid-svg-NHdIwalUZnhZBQes .cluster-label text{fill:#333;}#mermaid-svg-NHdIwalUZnhZBQes .cluster-label span{color:#333;}#mermaid-svg-NHdIwalUZnhZBQes .cluster-label span p{background-color:transparent;}#mermaid-svg-NHdIwalUZnhZBQes .label text,#mermaid-svg-NHdIwalUZnhZBQes span{fill:#333;color:#333;}#mermaid-svg-NHdIwalUZnhZBQes .node rect,#mermaid-svg-NHdIwalUZnhZBQes .node circle,#mermaid-svg-NHdIwalUZnhZBQes .node ellipse,#mermaid-svg-NHdIwalUZnhZBQes .node polygon,#mermaid-svg-NHdIwalUZnhZBQes .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-svg-NHdIwalUZnhZBQes .rough-node .label text,#mermaid-svg-NHdIwalUZnhZBQes .node .label text,#mermaid-svg-NHdIwalUZnhZBQes .image-shape .label,#mermaid-svg-NHdIwalUZnhZBQes .icon-shape .label{text-anchor:middle;}#mermaid-svg-NHdIwalUZnhZBQes .node .katex path{fill:#000;stroke:#000;stroke-width:1px;}#mermaid-svg-NHdIwalUZnhZBQes .rough-node .label,#mermaid-svg-NHdIwalUZnhZBQes .node .label,#mermaid-svg-NHdIwalUZnhZBQes .image-shape .label,#mermaid-svg-NHdIwalUZnhZBQes .icon-shape .label{text-align:center;}#mermaid-svg-NHdIwalUZnhZBQes .node.clickable{cursor:pointer;}#mermaid-svg-NHdIwalUZnhZBQes .root .anchor path{fill:#333333!important;stroke-width:0;stroke:#333333;}#mermaid-svg-NHdIwalUZnhZBQes .arrowheadPath{fill:#333333;}#mermaid-svg-NHdIwalUZnhZBQes .edgePath .path{stroke:#333333;stroke-width:2.0px;}#mermaid-svg-NHdIwalUZnhZBQes .flowchart-link{stroke:#333333;fill:none;}#mermaid-svg-NHdIwalUZnhZBQes .edgeLabel{background-color:rgba(232,232,232, 0.8);text-align:center;}#mermaid-svg-NHdIwalUZnhZBQes .edgeLabel p{background-color:rgba(232,232,232, 0.8);}#mermaid-svg-NHdIwalUZnhZBQes .edgeLabel rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#mermaid-svg-NHdIwalUZnhZBQes .labelBkg{background-color:rgba(232, 232, 232, 0.5);}#mermaid-svg-NHdIwalUZnhZBQes .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#mermaid-svg-NHdIwalUZnhZBQes .cluster text{fill:#333;}#mermaid-svg-NHdIwalUZnhZBQes .cluster span{color:#333;}#mermaid-svg-NHdIwalUZnhZBQes div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#mermaid-svg-NHdIwalUZnhZBQes .flowchartTitleText{text-anchor:middle;font-size:18px;fill:#333;}#mermaid-svg-NHdIwalUZnhZBQes rect.text{fill:none;stroke-width:0;}#mermaid-svg-NHdIwalUZnhZBQes .icon-shape,#mermaid-svg-NHdIwalUZnhZBQes .image-shape{background-color:rgba(232,232,232, 0.8);text-align:center;}#mermaid-svg-NHdIwalUZnhZBQes .icon-shape p,#mermaid-svg-NHdIwalUZnhZBQes .image-shape p{background-color:rgba(232,232,232, 0.8);padding:2px;}#mermaid-svg-NHdIwalUZnhZBQes .icon-shape .label rect,#mermaid-svg-NHdIwalUZnhZBQes .image-shape .label rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#mermaid-svg-NHdIwalUZnhZBQes .label-icon{display:inline-block;height:1em;overflow:visible;vertical-align:-0.125em;}#mermaid-svg-NHdIwalUZnhZBQes .node .label-icon path{fill:currentColor;stroke:revert;stroke-width:revert;}#mermaid-svg-NHdIwalUZnhZBQes :root{&#8211;mermaid-font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;} <\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>\u63d0\u4ea4 x \u4e0e Ev<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>(d, \u03c0)<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>d &#061; ALLOW \u65f6\u91ca\u653e cap<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>\u6b64\u8def\u5f84\u5fc5\u987b\u4e0d\u5b58\u5728<\/p>\n<p><\/span> <\/p>\n<p>           <span class=\"nodeLabel\"><\/p>\n<p>\u5e95\u5c42&#xff1a;\u7269\u7406\u4fe1\u4efb\u8fb9\u754c&#xff08;\u4e0d\u53ef\u7ed5\u8fc7&#xff09;<\/p>\n<p><\/span> <\/p>\n<p>           <span class=\"nodeLabel\"><\/p>\n<p>\u72ec\u5360 cap\u5baa\u6cd5 K \u56fa\u5316<\/p>\n<p><\/span> <\/p>\n<p>           <span class=\"nodeLabel\"><\/p>\n<p>\u4e2d\u5c42&#xff1a;\u88c1\u51b3&#xff08;\u786e\u5b9a&#xff09;<\/p>\n<p><\/span> <\/p>\n<p>           <span class=\"nodeLabel\"><\/p>\n<p>EBL Runtime\u0393 \u6c42\u503c&#xff0c;\u8f93\u51fa (d, \u03c0)<\/p>\n<p><\/span> <\/p>\n<p>           <span class=\"nodeLabel\"><\/p>\n<p>\u4e0a\u5c42&#xff1a;\u4e1a\u52a1\u4e0e\u667a\u80fd&#xff08;\u7075\u6d3b&#xff09;<\/p>\n<p><\/span> <\/p>\n<p>           <span class=\"edgeLabel\"><\/span> <\/p>\n<p>           <span class=\"nodeLabel\"><\/p>\n<p>\u4e1a\u52a1\u7cfb\u7edf<\/p>\n<p><\/span> <\/p>\n<p>           <span class=\"nodeLabel\"><\/p>\n<p>AI Agent \u7f16\u6392<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u73b0\u5b9e\u52a8\u4f5c<\/p>\n<p><\/span> <\/p>\n<p>\u56fe\u4e2d\u865a\u7ebf\u662f\u5168\u7ae0\u6700\u91cd\u8981\u7684\u4e00\u6761\u7ebf&#xff1a;\u5b83\u6807\u8bb0\u4e86\u4e00\u6761\u5fc5\u987b\u4e0d\u5b58\u5728\u7684\u8def\u5f84\u3002\u67b6\u6784\u8bc4\u5ba1\u7684\u6838\u5fc3\u95ee\u9898\u4e0d\u662f&#034;\u8fb9\u754c\u662f\u5426\u5b58\u5728&#034;&#xff0c;\u800c\u662f&#034;\u8be5\u865a\u7ebf\u662f\u5426\u771f\u7684\u4e0d\u5b58\u5728&#034;\u3002<\/p>\n<h4>2.4.4 Owner \u2260 God<\/h4>\n<p>\u7269\u7406\u8fb9\u754c\u8574\u542b\u4e00\u9879\u7ec4\u7ec7\u6027\u7ed3\u8bba&#xff1a;\u7cfb\u7edf\u6240\u6709\u8005\u62e5\u6709\u7ba1\u7406\u6743&#xff0c;\u4e0d\u81ea\u52a8\u62e5\u6709\u5173\u95ed\u5168\u90e8\u5b89\u5168\u7ea6\u675f\u7684\u80fd\u529b\u3002\u8be5\u539f\u5219\u5c06\u7b56\u7565\u5212\u5206\u4e3a\u4e24\u5c42\u2014\u2014\u53ef\u7f16\u7a0b\u7b56\u7565 P \u7531\u6388\u6743\u65b9\u6309\u4e1a\u52a1\u9700\u8981\u4fee\u6539&#xff1b;\u56fa\u5b9a\u5e95\u7ebf K \u5728\u8fb9\u754c\u5185\u56fa\u5316&#xff0c;\u4efb\u4f55\u7ba1\u7406\u8eab\u4efd\u5747\u4e0d\u53ef\u5173\u95ed\u3001\u524a\u5f31\u6216\u65c1\u8def&#xff08;\u516c\u7406 A4&#xff09;\u3002<\/p>\n<p>\u5de5\u7a0b\u7ea6\u5b9a E2.4&#xff08;\u5e95\u7ebf\u56fa\u5316\u4f4d\u7f6e&#xff09; K \u5e94\u56fa\u5316\u4e8e\u6301\u6709 cap \u7684\u786c\u4ef6\u57df\u5185&#xff0c;\u5176\u53d8\u66f4\u987b\u7ecf\u7531\u4e0e\u5e38\u89c4\u914d\u7f6e\u4e0d\u540c\u7684\u7269\u7406\u8def\u5f84&#xff08;\u5982\u73b0\u573a\u64cd\u4f5c\u3001\u591a\u65b9\u6301\u6709\u7684\u7269\u7406\u51ed\u8bc1\u3001\u6216\u4e0d\u53ef\u9006\u7684\u56fa\u4ef6\u7194\u4e1d&#xff09;\u3002\u8be5\u7ea6\u5b9a\u7684\u4ee3\u4ef7\u662f\u53d8\u66f4\u6210\u672c\u663e\u8457\u4e0a\u5347&#xff0c;\u5176\u6b63\u5f53\u6027\u4f9d\u636e\u662f&#xff1a;\u53ef\u88ab\u8fdc\u7a0b\u4fee\u6539\u7684\u5e95\u7ebf&#xff0c;\u5728\u8fdc\u7a0b\u653b\u9677\u573a\u666f\u4e2d\u4e0d\u6210\u7acb\u3002<\/p>\n<h4>2.4.5 \u8fb9\u754c\u4e0d\u662f\u5b64\u5c9b<\/h4>\n<p>\u72ec\u7acb\u4e0d\u7b49\u4e8e\u5b64\u7acb\u3002\u8fb9\u754c\u987b\u63a5\u6536\u4e0a\u5c42\u63d0\u4f9b\u7684\u4fe1\u606f\u2014\u2014\u610f\u56fe\u5bf9\u8c61\u3001\u5ba1\u6279\u8bb0\u5f55\u3001\u8bc1\u636e\u96c6\u5408\u3001\u72b6\u6001\u5feb\u7167\u2014\u2014\u5426\u5219\u65e0\u6cd5\u4f5c\u51fa\u6709\u610f\u4e49\u7684\u5224\u5b9a\u3002\u533a\u5206\u5728\u4e8e\u4fe1\u606f\u7684\u5730\u4f4d&#xff1a;\u4e0a\u5c42\u63d0\u4ea4\u7684\u662f\u8bc1\u636e&#xff0c;\u4e0d\u662f\u7ed3\u8bba&#xff08;\u516c\u7406 A7&#xff09;\u3002\u8fb9\u754c\u5bf9\u8bc1\u636e\u6267\u884c\u72ec\u7acb\u9a8c\u8bc1&#xff0c;\u5bf9\u7ed3\u8bba\u4e0d\u4e88\u91c7\u4fe1\u3002<\/p>\n<p>\u540c\u65f6&#xff0c;\u8fb9\u754c\u987b\u5177\u5907\u72ec\u7acb\u7684\u6545\u969c\u6a21\u5f0f\u3002\u82e5\u5224\u5b9a\u7ec4\u4ef6\u4e0e\u88ab\u5224\u5b9a\u7cfb\u7edf\u5171\u4eab\u4f9b\u7535\u3001\u65f6\u949f\u6e90\u6216\u901a\u4fe1\u901a\u9053&#xff0c;\u4e00\u6b21\u5171\u56e0\u6545\u969c\u5373\u53ef\u540c\u65f6\u6d88\u9664\u4e24\u8005&#xff0c;A6 \u6240\u8981\u6c42\u7684\u72ec\u7acb\u6027\u5728\u6545\u969c\u57df\u4e0a\u4e0d\u6210\u7acb\u3002<\/p>\n<hr \/>\n<h3>2.5 \u8bc1\u636e\u4e0e\u5224\u5b9a\u8bc1\u660e<\/h3>\n<p>\u9898\u8bb0&#xff1a;ALLOW \u4e0d\u662f\u7cfb\u7edf\u6ca1\u6709\u53d1\u73b0\u95ee\u9898&#xff0c;\u800c\u662f\u7cfb\u7edf\u5df2\u7ecf\u5f62\u6210\u5b8c\u6574\u8bc1\u660e\u3002<\/p>\n<h4>2.5.1 \u7ed3\u8bba\u4e0e\u4e8b\u5b9e<\/h4>\n<p>\u4e0a\u6e38\u7cfb\u7edf\u5e38\u4ee5\u7ed3\u8bba\u5f62\u5f0f\u63d0\u4ea4\u4fe1\u606f&#xff1a;\u201c\u98ce\u63a7\u5df2\u901a\u8fc7\u201d\u201c\u5408\u89c4\u5df2\u68c0\u67e5\u201d\u201c\u8eab\u4efd\u5df2\u9a8c\u8bc1\u201d\u3002\u8fd9\u7c7b\u9648\u8ff0\u5728\u94fe\u4e0a\u88ab\u9010\u7ea7\u91c7\u4fe1&#xff0c;\u5f62\u6210\u4e00\u6761\u4fe1\u4efb\u4f20\u9012\u94fe\u3002\u5176\u95ee\u9898\u5728\u4e8e&#xff0c;\u4fe1\u4efb\u4e0d\u56e0\u4f20\u9012\u800c\u589e\u5f3a&#xff0c;\u5374\u5728\u4f20\u9012\u4e2d\u5931\u53bb\u53ef\u6838\u9a8c\u6027&#xff1a;\u63a5\u6536\u65b9\u65e0\u6cd5\u5224\u65ad\u8be5\u7ed3\u8bba\u57fa\u4e8e\u4f55\u79cd\u4e8b\u5b9e\u3001\u5728\u4f55\u65f6\u6210\u7acb\u3001\u9488\u5bf9\u54ea\u4e2a\u5bf9\u8c61\u6210\u7acb\u3002<\/p>\n<p>\u6267\u884c\u63a7\u5236\u8981\u6c42\u5173\u952e\u4e8b\u5b9e\u4ee5\u8bc1\u636e\u5f62\u5f0f\u8fdb\u5165\u5224\u5b9a&#xff0c;\u4e14\u8bc1\u636e\u662f\u4e00\u7b49\u8f93\u5165\u800c\u975e\u9644\u5c5e\u8bb0\u5f55\u3002<\/p>\n<p>\u5b9a\u4e49 D2.5.1&#xff08;\u8bc1\u636e \/ Evidence&#xff09; \u7528\u4e8e\u8bc1\u6210\u67d0\u9879\u6761\u4ef6\u7684\u53ef\u9a8c\u8bc1\u4e8b\u5b9e\u5bf9\u8c61&#xff0c;\u81f3\u5c11\u643a\u5e26\u56db\u9879\u5143\u6570\u636e&#xff1a;\u7c7b\u578b&#xff08;\u8bc1\u660e\u4f55\u79cd\u6761\u4ef6&#xff09;\u3001\u6765\u6e90&#xff08;\u7531\u8c01\u7b7e\u53d1\u53ca\u5176\u53ef\u9a8c\u8bc1\u51ed\u636e&#xff09;\u3001\u4e3b\u4f53\u7ed1\u5b9a&#xff08;\u6240\u63cf\u8ff0\u7684\u5bf9\u8c61&#xff09;\u3001\u65f6\u95f4\u8bed\u4e49&#xff08;\u751f\u6548\u65f6\u523b\u4e0e\u6709\u6548\u671f&#xff09;\u3002\u7f3a\u5c11\u4efb\u4e00\u9879\u7684\u8f93\u5165\u4e0d\u6784\u6210\u8bc1\u636e\u3002<\/p>\n<h4>2.5.2 \u8bc1\u636e\u4e0e\u65e5\u5fd7<\/h4>\n<p>\u8bc1\u636e\u4e0e\u65e5\u5fd7\u53ef\u80fd\u4f7f\u7528\u76f8\u540c\u6570\u636e&#xff0c;\u4f46\u5728\u67b6\u6784\u4e2d\u627f\u62c5\u4e0d\u540c\u89d2\u8272\u3002<\/p>\n<p>\u8868 2-3\u3000\u8bc1\u636e\u4e0e\u65e5\u5fd7\u7684\u89d2\u8272\u533a\u522b<\/p>\n<table>\n<tr>\u65e5\u5fd7\u8bc1\u636e<\/tr>\n<tbody>\n<tr>\n<td>\u56de\u7b54\u7684\u95ee\u9898<\/td>\n<td>\u7cfb\u7edf\u8fc7\u53bb\u53d1\u751f\u4e86\u4ec0\u4e48<\/td>\n<td>\u672c\u6b21\u6267\u884c\u6240\u4f9d\u8d56\u7684\u5173\u952e\u4e8b\u5b9e\u662f\u4ec0\u4e48<\/td>\n<\/tr>\n<tr>\n<td>\u4f7f\u7528\u65f6\u70b9<\/td>\n<td>\u4e8b\u540e<\/td>\n<td>\u4e8b\u524d<\/td>\n<\/tr>\n<tr>\n<td>\u53c2\u4e0e\u88c1\u51b3<\/td>\n<td>\u5426<\/td>\n<td>\u662f<\/td>\n<\/tr>\n<tr>\n<td>\u7f3a\u5931\u540e\u679c<\/td>\n<td>\u8ffd\u6eaf\u56f0\u96be<\/td>\n<td>\u65e0\u6cd5\u4ea7\u751f ALLOW<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u4e00\u6b21\u5b8c\u6574\u6267\u884c\u7684\u8bc1\u636e\u96c6\u6700\u7ec8\u4e5f\u5e94\u8fdb\u5165\u5ba1\u8ba1\u5b58\u50a8&#xff0c;\u4f46\u53ea\u6709\u5728\u6267\u884c\u524d\u53c2\u4e0e\u5224\u5b9a\u7684\u90e8\u5206&#xff0c;\u624d\u5c5e\u4e8e\u6267\u884c\u63a7\u5236\u7684\u8303\u7574\u3002<\/p>\n<h4>2.5.3 \u56db\u9879\u8bed\u4e49\u8981\u6c42<\/h4>\n<p>\u6709\u6548\u671f\u3002 \u8bc1\u636e\u63cf\u8ff0\u7684\u662f\u67d0\u4e00\u65f6\u523b\u7684\u4e8b\u5b9e&#xff0c;\u800c\u975e\u6c38\u4e45\u6210\u7acb\u7684\u547d\u9898\u3002\u98ce\u63a7\u5feb\u7167\u3001\u8bbe\u5907\u72b6\u6001\u3001\u4f59\u989d\u3001\u6388\u6743\u8303\u56f4\u5747\u968f\u65f6\u95f4\u53d8\u5316\u3002\u8bc1\u636e\u987b\u643a\u5e26\u6709\u6548\u671f&#xff0c;\u8d85\u51fa\u540e\u72b6\u6001\u8f6c\u4e3a EXPIRED&#xff0c;\u4e0d\u518d\u53c2\u4e0e\u8bc1\u660e&#xff08;\u516c\u7406 A8\u3001A9&#xff09;\u3002<\/p>\n<p>\u5bf9\u8c61\u7ed1\u5b9a\u3002 \u8bc1\u636e\u987b\u7ed1\u5b9a\u5176\u6240\u63cf\u8ff0\u7684\u5177\u4f53\u5bf9\u8c61\u3002&#034;\u8be5\u8d26\u6237\u5df2\u901a\u8fc7\u5408\u89c4\u5ba1\u67e5&#034;\u82e5\u4e0d\u7ed1\u5b9a\u8d26\u6237\u6807\u8bc6&#xff0c;\u5219\u53ef\u88ab\u7528\u4e8e\u8bc1\u6210\u4efb\u610f\u8d26\u6237&#xff1b;&#034;\u8bbe\u5907\u5904\u4e8e\u5b89\u5168\u72b6\u6001&#034;\u82e5\u4e0d\u7ed1\u5b9a\u8bbe\u5907\u6807\u8bc6\u4e0e\u72b6\u6001\u5feb\u7167\u65f6\u523b&#xff0c;\u5219\u53ef\u88ab\u590d\u7528\u4e8e\u5176\u4ed6\u8bbe\u5907\u6216\u5176\u4ed6\u65f6\u523b\u3002<\/p>\n<p>\u51b2\u7a81\u4fdd\u7559\u3002 \u5f53\u591a\u4efd\u540c\u7c7b\u8bc1\u636e\u76f8\u4e92\u77db\u76fe\u65f6&#xff0c;\u7cfb\u7edf\u4e0d\u5f97\u901a\u8fc7\u9009\u53d6\u5176\u4e00\u3001\u53d6\u591a\u6570\u6216\u6309\u6765\u6e90\u4f18\u5148\u7ea7\u6d88\u89e3\u51b2\u7a81\u3002\u51b2\u7a81\u672c\u8eab\u662f\u4e00\u9879\u4e8b\u5b9e&#xff0c;\u987b\u88ab\u4fdd\u7559\u5e76\u89e6\u53d1 CONFLICT \u72b6\u6001\u3002\u5c06\u51b2\u7a81\u6d88\u89e3\u4e3a\u5355\u4e00\u7ed3\u8bba&#xff0c;\u7b49\u4e8e\u7528\u4e00\u6b21\u672a\u7ecf\u8bc1\u660e\u7684\u88c1\u91cf\u66ff\u4ee3\u8bc1\u636e&#xff08;\u516c\u7406 A7&#xff09;\u3002<\/p>\n<p>\u5173\u7cfb\u72ec\u7acb\u6027\u3002 \u591a\u65b9\u786e\u8ba4\u5e38\u4ee5\u6570\u91cf\u8868\u8fbe\u2014\u2014\u4e24\u4eba\u6279\u51c6\u3001\u4e09\u4eba\u7b7e\u540d\u3001\u591a\u6570\u901a\u8fc7\u3002\u6570\u91cf\u4e0d\u8574\u542b\u72ec\u7acb\u6027&#xff1a;\u4e09\u4e2a\u8d26\u6237\u53ef\u80fd\u7531\u540c\u4e00\u4eba\u63a7\u5236&#xff0c;\u591a\u4e2a\u670d\u52a1\u53ef\u80fd\u4f9d\u8d56\u540c\u4e00\u51ed\u8bc1&#xff0c;\u591a\u4e2a\u5ba1\u6279\u8005\u53ef\u80fd\u6765\u81ea\u540c\u4e00\u7ba1\u7406\u57df&#xff0c;\u591a\u4e2a\u4f20\u611f\u5668\u53ef\u80fd\u5171\u4eab\u540c\u4e00\u6545\u969c\u6e90\u3002<\/p>\n<p>\u547d\u9898 P2.5&#xff08;\u8ba1\u6570\u4e0d\u6784\u6210\u72ec\u7acb\u6027\u8bc1\u660e&#xff09; \u8bc1\u636e\u6570\u91cf n &gt; 1 \u4e0d\u8574\u542b\u8fd9\u4e9b\u8bc1\u636e\u7684\u5931\u6548\u4e8b\u4ef6\u76f8\u4e92\u72ec\u7acb\u3002\u82e5\u4e0d\u8868\u8fbe\u72ec\u7acb\u6027\u7ef4\u5ea6&#xff0c;\u591a\u65b9\u786e\u8ba4\u5728\u5171\u56e0\u5931\u6548\u4e0b\u9000\u5316\u4e3a\u5355\u65b9\u786e\u8ba4\u3002<\/p>\n<p>\u56e0\u6b64\u72ec\u7acb\u6027\u987b\u4f5c\u4e3a\u4e00\u7b49\u8bed\u4e49\u88ab\u663e\u5f0f\u8868\u8fbe&#xff0c;\u5176\u7ef4\u5ea6\u81f3\u5c11\u5305\u62ec&#xff1a;\u8eab\u4efd\u4e3b\u4f53\u3001\u8bbe\u5907\u3001\u4fe1\u4efb\u57df\u3001\u5bc6\u94a5\u6765\u6e90\u3001\u7ec4\u7ec7\u89d2\u8272\u3001\u7269\u7406\u4f4d\u7f6e\u3001\u6545\u969c\u8def\u5f84\u3002<\/p>\n<h4>2.5.4 \u5b8c\u6574\u8bc1\u660e\u4e0e ALLOW<\/h4>\n<p>\u4f20\u7edf\u7b56\u7565\u7cfb\u7edf\u5e7f\u6cdb\u4f7f\u7528\u7f3a\u7701\u884c\u4e3a&#xff1a;\u5b57\u6bb5\u7f3a\u5931\u65f6\u91c7\u7528\u9ed8\u8ba4\u914d\u7f6e&#xff0c;\u72b6\u6001\u672a\u77e5\u65f6\u6cbf\u7528\u4e0a\u6b21\u7ed3\u679c&#xff0c;\u68c0\u67e5\u5931\u8d25\u65f6\u4e3a\u53ef\u7528\u6027\u7ee7\u7eed\u6267\u884c\u3002\u5728\u53ef\u56de\u6eda\u7684\u4e1a\u52a1\u573a\u666f\u4e2d&#xff0c;\u8fd9\u7c7b\u8bbe\u8ba1\u6709\u5176\u5408\u7406\u6027&#xff1b;\u5728\u4e0d\u53ef\u9006\u6267\u884c\u4e2d&#xff0c;\u5b83\u76f4\u63a5\u8fdd\u53cd\u516c\u7406 A8\u3002<\/p>\n<p>d &#061; ALLOW \u987b\u7531\u5b8c\u6574\u8bc1\u660e\u4ea7\u751f&#xff0c;\u5373\u4ee5\u4e0b\u6761\u4ef6\u5168\u90e8\u6210\u7acb&#xff1a;\u6bcf\u4e00\u9879\u5fc5\u8981\u6761\u4ef6\u90fd\u6709\u5bf9\u5e94\u8bc1\u636e&#xff1b;\u6bcf\u4e00\u4efd\u8bc1\u636e \u03c3(e) &#061; VALID&#xff1b;\u6bcf\u4e00\u4efd\u8bc1\u636e\u4e0e\u5bf9\u8c61\u7ed1\u5b9a&#xff1b;\u8bc1\u636e\u95f4\u4e0d\u5b58\u5728\u672a\u89e3\u51b3\u7684\u51b2\u7a81&#xff1b;\u6700\u7ec8\u5bf9\u8c61\u4e0e\u610f\u56fe\u53ca\u5ba1\u6279\u4e00\u81f4&#xff1b;\u672a\u89e6\u53d1\u4efb\u4f55\u56fa\u5b9a\u5426\u51b3\u6761\u4ef6\u3002<\/p>\n<p>\u8fd9\u4e00\u8981\u6c42\u533a\u5206\u4e86\u4e24\u79cd\u6027\u8d28\u76f8\u53cd\u7684\u5224\u65ad\u3002&#034;\u7cfb\u7edf\u672a\u53d1\u73b0\u95ee\u9898&#034;\u662f\u6d88\u6781\u5224\u65ad&#xff0c;\u5176\u6210\u7acb\u4f9d\u8d56\u4e8e\u68c0\u67e5\u7684\u5b8c\u5907\u6027&#xff0c;\u800c\u68c0\u67e5\u7684\u5b8c\u5907\u6027\u65e0\u6cd5\u81ea\u8bc1&#xff1b;&#034;\u7cfb\u7edf\u5df2\u5f62\u6210\u5b8c\u6574\u8bc1\u660e&#034;\u662f\u79ef\u6781\u5224\u65ad&#xff0c;\u5176\u6210\u7acb\u7531 \u03c0 \u663e\u5f0f\u627f\u8f7d&#xff0c;\u53ef\u88ab\u91cd\u653e\u4e0e\u5ba1\u8ba1\u3002\u6267\u884c\u63a7\u5236\u53ea\u63a5\u53d7\u540e\u8005\u3002<\/p>\n<p>\u56fe 2-4\u3000\u5224\u5b9a\u8bc1\u660e\u7684\u7ed3\u6784<\/p>\n<p>  #mermaid-svg-dCEwMXM9GQvGWY8S{font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;font-size:16px;fill:#333;}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#mermaid-svg-dCEwMXM9GQvGWY8S .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#mermaid-svg-dCEwMXM9GQvGWY8S .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#mermaid-svg-dCEwMXM9GQvGWY8S .error-icon{fill:#552222;}#mermaid-svg-dCEwMXM9GQvGWY8S .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-dCEwMXM9GQvGWY8S .edge-thickness-normal{stroke-width:1px;}#mermaid-svg-dCEwMXM9GQvGWY8S .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-dCEwMXM9GQvGWY8S .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-dCEwMXM9GQvGWY8S .edge-thickness-invisible{stroke-width:0;fill:none;}#mermaid-svg-dCEwMXM9GQvGWY8S .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-dCEwMXM9GQvGWY8S .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-dCEwMXM9GQvGWY8S .marker{fill:#333333;stroke:#333333;}#mermaid-svg-dCEwMXM9GQvGWY8S .marker.cross{stroke:#333333;}#mermaid-svg-dCEwMXM9GQvGWY8S svg{font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-dCEwMXM9GQvGWY8S p{margin:0;}#mermaid-svg-dCEwMXM9GQvGWY8S .label{font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;color:#333;}#mermaid-svg-dCEwMXM9GQvGWY8S .cluster-label text{fill:#333;}#mermaid-svg-dCEwMXM9GQvGWY8S .cluster-label span{color:#333;}#mermaid-svg-dCEwMXM9GQvGWY8S .cluster-label span p{background-color:transparent;}#mermaid-svg-dCEwMXM9GQvGWY8S .label text,#mermaid-svg-dCEwMXM9GQvGWY8S span{fill:#333;color:#333;}#mermaid-svg-dCEwMXM9GQvGWY8S .node rect,#mermaid-svg-dCEwMXM9GQvGWY8S .node circle,#mermaid-svg-dCEwMXM9GQvGWY8S .node ellipse,#mermaid-svg-dCEwMXM9GQvGWY8S .node polygon,#mermaid-svg-dCEwMXM9GQvGWY8S .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-svg-dCEwMXM9GQvGWY8S .rough-node .label text,#mermaid-svg-dCEwMXM9GQvGWY8S .node .label text,#mermaid-svg-dCEwMXM9GQvGWY8S .image-shape .label,#mermaid-svg-dCEwMXM9GQvGWY8S .icon-shape .label{text-anchor:middle;}#mermaid-svg-dCEwMXM9GQvGWY8S .node .katex path{fill:#000;stroke:#000;stroke-width:1px;}#mermaid-svg-dCEwMXM9GQvGWY8S .rough-node .label,#mermaid-svg-dCEwMXM9GQvGWY8S .node .label,#mermaid-svg-dCEwMXM9GQvGWY8S .image-shape .label,#mermaid-svg-dCEwMXM9GQvGWY8S .icon-shape .label{text-align:center;}#mermaid-svg-dCEwMXM9GQvGWY8S .node.clickable{cursor:pointer;}#mermaid-svg-dCEwMXM9GQvGWY8S .root .anchor path{fill:#333333!important;stroke-width:0;stroke:#333333;}#mermaid-svg-dCEwMXM9GQvGWY8S .arrowheadPath{fill:#333333;}#mermaid-svg-dCEwMXM9GQvGWY8S .edgePath .path{stroke:#333333;stroke-width:2.0px;}#mermaid-svg-dCEwMXM9GQvGWY8S .flowchart-link{stroke:#333333;fill:none;}#mermaid-svg-dCEwMXM9GQvGWY8S .edgeLabel{background-color:rgba(232,232,232, 0.8);text-align:center;}#mermaid-svg-dCEwMXM9GQvGWY8S .edgeLabel p{background-color:rgba(232,232,232, 0.8);}#mermaid-svg-dCEwMXM9GQvGWY8S .edgeLabel rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#mermaid-svg-dCEwMXM9GQvGWY8S .labelBkg{background-color:rgba(232, 232, 232, 0.5);}#mermaid-svg-dCEwMXM9GQvGWY8S .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#mermaid-svg-dCEwMXM9GQvGWY8S .cluster text{fill:#333;}#mermaid-svg-dCEwMXM9GQvGWY8S .cluster span{color:#333;}#mermaid-svg-dCEwMXM9GQvGWY8S div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#mermaid-svg-dCEwMXM9GQvGWY8S .flowchartTitleText{text-anchor:middle;font-size:18px;fill:#333;}#mermaid-svg-dCEwMXM9GQvGWY8S rect.text{fill:none;stroke-width:0;}#mermaid-svg-dCEwMXM9GQvGWY8S .icon-shape,#mermaid-svg-dCEwMXM9GQvGWY8S .image-shape{background-color:rgba(232,232,232, 0.8);text-align:center;}#mermaid-svg-dCEwMXM9GQvGWY8S .icon-shape p,#mermaid-svg-dCEwMXM9GQvGWY8S .image-shape p{background-color:rgba(232,232,232, 0.8);padding:2px;}#mermaid-svg-dCEwMXM9GQvGWY8S .icon-shape .label rect,#mermaid-svg-dCEwMXM9GQvGWY8S .image-shape .label rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#mermaid-svg-dCEwMXM9GQvGWY8S .label-icon{display:inline-block;height:1em;overflow:visible;vertical-align:-0.125em;}#mermaid-svg-dCEwMXM9GQvGWY8S .node .label-icon path{fill:currentColor;stroke:revert;stroke-width:revert;}#mermaid-svg-dCEwMXM9GQvGWY8S :root{&#8211;mermaid-font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;} <\/p>\n<p>         <span class=\"edgeLabel\"><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u8bc1\u636e e\u2081\u03c3 &#061; VALID<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u6761\u4ef6 c\u2081<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u8bc1\u636e e\u2082\u03c3 &#061; VALID<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u8bc1\u636e e\u2083\u03c3 &#061; VALID<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u6761\u4ef6 c\u2082<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u89c4\u5219\u6c42\u503cP \u2227 K<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u7ed1\u5b9a\u5173\u7cfbI \u2194 x \u2194 Approval<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u03c0&#xff1a;\u5224\u5b9a\u8bc1\u660e<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>d &#061; ALLOW<\/p>\n<p><\/span> <\/p>\n<p>\u8bc1\u660e\u56fe\u4e2d\u7684\u4efb\u4e00\u8282\u70b9\u5931\u6548\u2014\u2014\u8bc1\u636e\u72b6\u6001\u975e VALID\u3001\u7ed1\u5b9a\u4e0d\u6210\u7acb\u3001\u89c4\u5219\u672a\u6ee1\u8db3\u2014\u2014\u5747\u4e0d\u4ea7\u751f ALLOW&#xff0c;\u4e14\u5931\u6548\u4f4d\u7f6e\u5728 \u03c0 \u4e2d\u53ef\u88ab\u5b9a\u4f4d\u3002\u8fd9\u4e00\u53ef\u5b9a\u4f4d\u6027\u662f\u8fd0\u7ef4\u53ef\u884c\u6027\u7684\u524d\u63d0&#xff1a;\u62d2\u7edd\u82e5\u4e0d\u80fd\u8bf4\u660e\u539f\u56e0&#xff0c;\u7cfb\u7edf\u5c06\u5728\u5b9e\u8df5\u4e2d\u88ab\u7ed5\u8fc7\u3002<\/p>\n<h4>2.5.5 \u8bc1\u636e\u94fe<\/h4>\n<p>\u4e00\u6b21\u6267\u884c\u901a\u5e38\u8de8\u8d8a\u591a\u4e2a\u9636\u6bb5&#xff1a;\u610f\u56fe\u521b\u5efa\u3001\u7b56\u7565\u9009\u62e9\u3001\u5ba1\u6279\u63d0\u4ea4\u3001\u72b6\u6001\u91c7\u96c6\u3001\u5bf9\u8c61\u751f\u6210\u3002\u5404\u9636\u6bb5\u4ea7\u751f\u7684\u8bc1\u636e\u4e4b\u95f4\u5b58\u5728\u5f15\u7528\u4e0e\u4f9d\u8d56\u5173\u7cfb&#xff0c;\u6784\u6210\u8bc1\u636e\u94fe\u3002\u94fe\u7ed3\u6784\u7684\u610f\u4e49\u5728\u4e8e&#xff0c;\u5b83\u4f7f&#034;\u67d0\u9879\u4e8b\u5b9e\u4e3a\u4f55\u6210\u7acb&#034;\u53ef\u88ab\u9010\u7ea7\u8ffd\u6eaf\u81f3\u53ef\u9a8c\u8bc1\u7684\u6e90\u5934&#xff0c;\u800c\u975e\u7ec8\u6b62\u4e8e\u67d0\u4e2a\u4e0d\u53ef\u6838\u9a8c\u7684\u65ad\u8a00\u3002<\/p>\n<p>\u3014\u8865\u3015\u5173\u4e8e\u8bc1\u660e\u7684\u5b58\u50a8\u8fb9\u754c\u3002 \u5b8c\u6574\u4fdd\u5b58\u5168\u90e8\u8bc1\u636e\u5c06\u5e26\u6765\u5b58\u50a8\u4e0e\u9690\u79c1\u6210\u672c&#xff0c;\u4e14\u5728\u591a\u6570\u573a\u666f\u4e0b\u4e0d\u5fc5\u8981\u3002\u53ef\u884c\u7684\u5de5\u7a0b\u6298\u4e2d\u662f\u4fdd\u5b58\u8bc1\u660e\u7684\u53ef\u91cd\u653e\u6700\u5c0f\u96c6&#xff1a;\u8bc1\u636e\u6458\u8981\u3001\u6765\u6e90\u51ed\u636e\u3001\u72b6\u6001\u6807\u8bb0\u4e0e\u89c4\u5219\u7248\u672c&#xff0c;\u4f7f\u88c1\u51b3\u53ef\u88ab\u91cd\u65b0\u6c42\u503c\u800c\u4e0d\u5fc5\u4fdd\u7559\u539f\u59cb\u6570\u636e\u5168\u6587\u3002\u8be5\u6298\u4e2d\u7684\u4ee3\u4ef7\u662f&#xff0c;\u539f\u59cb\u6570\u636e\u4e00\u65e6\u4e0d\u53ef\u83b7\u53d6&#xff0c;\u91cd\u653e\u53ea\u80fd\u9a8c\u8bc1\u4e00\u81f4\u6027\u800c\u4e0d\u80fd\u9a8c\u8bc1\u771f\u5b9e\u6027\u3002<\/p>\n<hr \/>\n<h3>2.6 \u516c\u7406\u4f53\u7cfb&#xff08;A1\u2013A10&#xff09;<\/h3>\n<p>\u4ee5\u4e0b\u5341\u6761\u6784\u6210\u672c\u4e66\u7684\u516c\u7406\u96c6\u5408\u3002\u5b83\u4eec\u4e0d\u662f\u4ece\u539f\u7a3f\u8bba\u8bc1\u4e2d&#034;\u603b\u7ed3&#034;\u51fa\u6765\u7684\u8981\u70b9&#xff0c;\u800c\u662f\u88ab\u9009\u5b9a\u4e3a\u8d77\u70b9\u7684\u547d\u9898\u2014\u2014\u7b2c 2 \u7ae0\u524d\u4e94\u8282\u7684\u4f5c\u7528&#xff0c;\u662f\u8bf4\u660e\u4e3a\u4ec0\u4e48\u8fd9\u5341\u6761\u503c\u5f97\u88ab\u5f53\u4f5c\u8d77\u70b9\u3002<\/p>\n<h4>A1\u3000\u610f\u56fe\u53ef\u9a8c\u8bc1\u6027<\/h4>\n<p>\u82e5\u4e0d\u5b58\u5728\u53ef\u9a8c\u8bc1\u7684\u610f\u56fe\u5bf9\u8c61 I&#xff0c;\u5219 \u0393 \u65e0\u5b9a\u4e49&#xff0c;\u8f93\u51fa d &#061; DENY\u3002<\/p>\n<p>\u5426\u5219\u4f1a\u600e\u6837&#xff1a;\u6ca1\u6709 I \u4f5c\u4e3a\u53c2\u7167&#xff0c;\u4efb\u4f55\u6267\u884c\u7ed3\u679c\u90fd\u65e0\u6cd5\u88ab\u5224\u5b9a\u4e3a&#034;\u504f\u79bb&#034;\u3002\u7cfb\u7edf\u53ef\u4ee5\u6b63\u786e\u8fd0\u884c&#xff0c;\u5374\u65e0\u6cd5\u8bf4\u660e\u81ea\u5df1\u8fd0\u884c\u5f97\u5bf9\u4e0d\u5bf9\u3002 \u5173\u8054&#xff1a;D2.2.1 \u610f\u56fe\u5bf9\u8c61\u3001\u00a71.3 \u6267\u884c\u7f1d\u9699\u7684\u8d77\u70b9\u3002<\/p>\n<h4>A2\u3000\u8f6c\u6362\u975e\u540c\u4e00\u6027<\/h4>\n<p>I \u2260 x\u3002\u4ece I \u5230 x \u5fc5\u987b\u7ecf\u8fc7\u53d7\u7ea6\u675f\u7684\u8f6c\u6362&#xff0c;\u4e14\u8f6c\u6362\u987b\u4fdd\u6301 I.inv\u3002<\/p>\n<p>\u5426\u5219\u4f1a\u600e\u6837&#xff1a;\u628a\u610f\u56fe\u76f4\u63a5\u5f53\u4f5c\u6267\u884c&#xff0c;\u7b49\u4e8e\u627f\u8ba4\u81ea\u7136\u8bed\u8a00\u63cf\u8ff0\u4e0e\u7cbe\u786e\u52a8\u4f5c\u4e4b\u95f4\u4e0d\u5b58\u5728\u8bed\u4e49\u635f\u8017\u3002\u539f\u7a3f 2.2 \u5168\u8282\u5373\u5728\u8bba\u8bc1\u8be5\u635f\u8017\u5fc5\u7136\u5b58\u5728\u3002 \u5173\u8054&#xff1a;\u00a72.2 Intent Binding\u3001\u5a01\u80c1\u7c7b X2 \u610f\u56fe\u6f02\u79fb\u3002<\/p>\n<h4>A3\u3000\u5ba1\u6279\u5bf9\u8c61\u7ed1\u5b9a<\/h4>\n<p>\u4efb\u4f55\u6388\u6743\u987b\u7ed1\u5b9a hash(x)&#xff0c;\u4e0d\u5f97\u4ec5\u7ed1\u5b9a I \u7684\u81ea\u7136\u8bed\u8a00\u63cf\u8ff0\u3002<\/p>\n<p>\u5426\u5219\u4f1a\u600e\u6837&#xff1a;\u6388\u6743\u4e0e\u6267\u884c\u6307\u5411\u4e0d\u540c\u5bf9\u8c61&#xff0c;\u5ba1\u6279\u5728\u65f6\u5e8f\u4e0a\u5931\u53bb\u7ea6\u675f\u529b\u3002 \u5173\u8054&#xff1a;\u00a72.3.2\u3001\u5a01\u80c1\u7c7b X3 \u5bf9\u8c61\u66ff\u6362\u3002<\/p>\n<h4>A4\u3000\u7b56\u7565\u975e\u6743\u5a01\u6027<\/h4>\n<p>\u5224\u5b9a\u4e3a P \u2227 K \u7684\u5408\u53d6\u3002P \u4e0d\u53ef\u5173\u95ed\u3001\u524a\u5f31\u6216\u65c1\u8def K\u3002<\/p>\n<p>\u5f62\u5f0f\u5316\u63a8\u8bba&#xff1a;\u2200P&#xff0c;ALLOW(\u0393) \u2286 ALLOW(\u0393|P&#061;\u2205)\u2014\u2014\u4efb\u4f55\u7b56\u7565\u53ea\u80fd\u6536\u7f29\u653e\u884c\u96c6\u5408&#xff0c;\u4e0d\u80fd\u6269\u5927\u3002 \u5426\u5219\u4f1a\u600e\u6837&#xff1a;\u53ef\u7f16\u7a0b\u5c42\u83b7\u5f97\u4e86\u4fee\u6539\u5e95\u7ebf\u7684\u80fd\u529b&#xff0c;\u5b89\u5168\u6027\u9000\u5316\u4e3a\u914d\u7f6e\u6b63\u786e\u6027\u3002 \u5173\u8054&#xff1a;\u00a74.3 Constitution\u3001\u5a01\u80c1\u7c7b X6 \u6743\u9650\u8d8a\u6743\u3002<\/p>\n<h4>A5\u3000\u8fb9\u754c\u5426\u51b3\u6743<\/h4>\n<p>\u82e5\u7cfb\u7edf\u4e2d\u4e0d\u5b58\u5728\u80fd\u8f93\u51fa\u975e ALLOW\u3001\u4e14\u8be5\u8f93\u51fa\u4e0d\u53ef\u88ab\u8986\u76d6\u7684\u7ec4\u4ef6&#xff0c;\u5219\u8be5\u7cfb\u7edf\u4e0d\u6784\u6210\u6267\u884c\u63a7\u5236\u7cfb\u7edf\u3002<\/p>\n<p>\u5426\u5219\u4f1a\u600e\u6837&#xff1a;\u6240\u6709\u7ec4\u4ef6\u90fd\u53ea\u80fd\u8bf4&#034;\u53ef\u4ee5&#034;&#xff0c;\u8fb9\u754c\u5728\u5f62\u5f0f\u4e0a\u5b58\u5728\u800c\u5728\u529f\u80fd\u4e0a\u7f3a\u5e2d\u3002 \u5173\u8054&#xff1a;D2.3.1 Final Veto\u3002<\/p>\n<h4>A6\u3000\u5426\u51b3\u72ec\u7acb\u6027<\/h4>\n<p>\u751f\u6210 x \u7684\u4fe1\u4efb\u57df\u4e0e\u6267\u884c \u0393 \u7684\u4fe1\u4efb\u57df\u4e0d\u5f97\u540c\u4e00\u3002<\/p>\n<p>\u5426\u5219\u4f1a\u600e\u6837&#xff1a;\u5355\u70b9\u653b\u9677\u540c\u65f6\u6d88\u706d\u6267\u884c\u80fd\u529b\u7684\u7ea6\u675f\u4e0e\u7ea6\u675f\u672c\u8eab\u3002 \u5173\u8054&#xff1a;\u00a72.3.3 \u516d\u7ef4\u72ec\u7acb\u6027\u3001\u5a01\u80c1\u7c7b X9 \u4f9b\u5e94\u94fe\u6c61\u67d3\u3002<\/p>\n<h4>A7\u3000\u4e8b\u5b9e\u8bc1\u636e\u5316<\/h4>\n<p>\u5173\u952e\u6761\u4ef6\u7684\u6210\u7acb\u987b\u7531 Ev \u8bc1\u660e\u3002\u6765\u6e90\u53ef\u4fe1\u5ea6\u4e0d\u6784\u6210\u8bc1\u660e\u3002<\/p>\n<p>\u5426\u5219\u4f1a\u600e\u6837&#xff1a;\u5224\u5b9a\u9000\u5316\u4e3a\u5bf9\u4e0a\u6e38\u7ec4\u4ef6\u7684\u4fe1\u4efb\u4f20\u9012&#xff0c;\u4fe1\u4efb\u5728\u94fe\u6761\u4e0a\u4e0d\u53ef\u7d2f\u79ef\u5374\u88ab\u5f53\u4f5c\u53ef\u7d2f\u79ef\u3002 \u5173\u8054&#xff1a;\u00a72.5 Evidence\u3001\u5a01\u80c1\u7c7b X4 \u8bc1\u636e\u4f2a\u9020\u3002<\/p>\n<h4>A8\u3000\u4fdd\u5b88\u95ed\u5408<\/h4>\n<p>d &#061; ALLOW \u27fa \u5b58\u5728\u5b8c\u6574\u8bc1\u660e \u03c0\u3002\u8bc1\u636e\u72b6\u6001 \u03c3(e) \u2208 {VALID, UNKNOWN, MISSING, EXPIRED, CONFLICT}&#xff0c;\u5176\u4e2d\u4ec5 \u03c3(e) &#061; VALID \u7684\u8bc1\u636e\u53ef\u53c2\u4e0e \u03c0\u3002<\/p>\n<p>\u5173\u952e\u7ea6\u675f&#xff1a;\u56db\u79cd\u975e VALID \u72b6\u6001\u4e0d\u53ef\u538b\u7f29\u4e3a\u5355\u4e00\u5e03\u5c14\u503c\u2014\u2014\u5b83\u4eec\u5bf9\u5e94\u56db\u79cd\u4e0d\u540c\u7684\u8fd0\u7ef4\u54cd\u5e94&#xff08;\u8865\u4ea4&#xff0f;\u91cd\u65b0\u9a8c\u8bc1&#xff0f;\u91cd\u65b0\u7b7e\u53d1&#xff0f;\u4eba\u5de5\u88c1\u5b9a&#xff09;\u3002 \u5426\u5219\u4f1a\u600e\u6837&#xff1a;\u65e0\u6cd5\u8bc1\u660e\u88ab\u5f53\u4f5c\u53ef\u4ee5\u6267\u884c\u3002 \u5173\u8054&#xff1a;\u00a73.3 \u56db\u6001\u72b6\u6001\u673a\u3001E2.3 \u9ed8\u8ba4\u6001\u5ea6\u3002<\/p>\n<h4>A9\u3000\u91cd\u88c1\u51b3\u4e49\u52a1<\/h4>\n<p>x\u3001Ev\u3001Ctx \u4efb\u4e00\u53d1\u751f\u53d8\u5316&#xff0c;\u65e2\u6709 (d, \u03c0) \u7acb\u5373\u5931\u6548&#xff0c;\u987b\u91cd\u65b0\u6c42\u503c\u3002<\/p>\n<p>\u5426\u5219\u4f1a\u600e\u6837&#xff1a;\u5224\u5b9a\u7ed3\u679c\u6210\u4e3a\u53ef\u590d\u7528\u7684\u901a\u884c\u8bc1&#xff0c;\u65f6\u95f4\u5dee\u672c\u8eab\u53d8\u6210\u653b\u51fb\u9762\u3002 \u5173\u8054&#xff1a;\u00a72.2 \u610f\u56fe\u4e0d\u80fd\u6210\u4e3a\u6c38\u4e45\u6388\u6743\u3001\u5a01\u80c1\u7c7b X5 \u8bc1\u636e\u5931\u6548\u3002<\/p>\n<h4>A10\u3000\u80fd\u529b\u63a7\u5236<\/h4>\n<p>\u8fb9\u754c\u987b\u72ec\u5360\u67d0\u9879\u73b0\u5b9e\u52a8\u4f5c\u7684\u5fc5\u8981\u80fd\u529b cap&#xff0c;\u4f7f\u5f97 d \u2260 ALLOW \u21d2 \u8be5\u52a8\u4f5c\u4e0d\u53ef\u53d1\u751f\u3002<\/p>\n<p>\u5426\u5219\u4f1a\u600e\u6837&#xff1a;\u5426\u51b3\u53ea\u662f\u4e00\u4e2a\u53ef\u4ee5\u88ab\u7ed5\u8fc7\u7684\u5efa\u8bae\u3002\u8fd9\u662f\u5168\u4e66\u4e2d\u552f\u4e00\u4e00\u6761\u8981\u6c42\u7269\u7406\u5b9e\u73b0\u7684\u516c\u7406\u2014\u2014A1\u2013A9 \u53ef\u4ee5\u5728\u8f6f\u4ef6\u4e2d\u6210\u7acb&#xff0c;A10 \u4e0d\u80fd\u3002 \u5173\u8054&#xff1a;\u00a72.4 \u7269\u7406\u4fe1\u4efb\u8fb9\u754c\u3001\u9644\u5f55 B\u3002<\/p>\n<hr \/>\n<h4>\u516c\u7406\u4e4b\u95f4\u7684\u5173\u7cfb<\/h4>\n<p>\u8868 2-5\u3000\u516c\u7406\u7684\u5c42\u6b21\u7ed3\u6784<\/p>\n<table>\n<tr>\u5c42\u516c\u7406\u56de\u7b54\u7684\u95ee\u9898<\/tr>\n<tbody>\n<tr>\n<td>\u5bf9\u8c61\u5c42<\/td>\n<td>A1\u3001A2\u3001A3\u3001A9<\/td>\n<td>\u5224\u5b9a\u7684\u5bf9\u8c61\u662f\u4ec0\u4e48&#xff0c;\u4f55\u65f6\u5931\u6548<\/td>\n<\/tr>\n<tr>\n<td>\u6743\u5a01\u5c42<\/td>\n<td>A4\u3001A5\u3001A6<\/td>\n<td>\u8c01\u6709\u6743\u8bf4&#034;\u4e0d&#034;&#xff0c;\u8c01\u65e0\u6743\u64a4\u9500\u5b83<\/td>\n<\/tr>\n<tr>\n<td>\u8bc1\u660e\u5c42<\/td>\n<td>A7\u3001A8<\/td>\n<td>\u4ec0\u4e48\u7b97\u4f5c\u7406\u7531&#xff0c;\u7406\u7531\u4e0d\u8db3\u65f6\u600e\u4e48\u529e<\/td>\n<\/tr>\n<tr>\n<td>\u5b9e\u73b0\u5c42<\/td>\n<td>A10<\/td>\n<td>\u5224\u5b9a\u7ed3\u8bba\u5982\u4f55\u5728\u7269\u7406\u4e0a\u751f\u6548<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u56db\u5c42\u6784\u6210\u4e00\u6761\u95ed\u5408\u94fe&#xff1a;\u786e\u5b9a\u5bf9\u8c61&#xff08;\u5bf9\u8c61\u5c42&#xff09;\u2192 \u786e\u5b9a\u6743\u5a01&#xff08;\u6743\u5a01\u5c42&#xff09;\u2192 \u786e\u5b9a\u7406\u7531&#xff08;\u8bc1\u660e\u5c42&#xff09;\u2192 \u786e\u5b9a\u751f\u6548\u65b9\u5f0f&#xff08;\u5b9e\u73b0\u5c42&#xff09;\u3002\u4efb\u4f55\u4e00\u5c42\u7f3a\u5931&#xff0c;\u5176\u4f59\u4e09\u5c42\u7684\u6210\u679c\u90fd\u4e0d\u6784\u6210\u6267\u884c\u63a7\u5236\u3002 \u539f\u7a3f\u53cd\u590d\u8bba\u8bc1\u7684&#034;\u5408\u6cd5\u8def\u5f84\u4e5f\u53ef\u4ee5\u4ea7\u751f\u9519\u8bef\u7ed3\u679c&#034;&#xff0c;\u5176\u7ed3\u6784\u6027\u539f\u56e0\u6b63\u662f\u73b0\u6709\u7cfb\u7edf\u901a\u5e38\u53ea\u5b9e\u73b0\u4e86\u5176\u4e2d\u4e00\u5230\u4e24\u5c42\u3002<\/p>\n<p>\u3014\u8865\u3015\u516c\u7406\u96c6\u5408\u7684\u72ec\u7acb\u6027\u8bf4\u660e\u3002 A1\u2013A10 \u5e76\u975e\u4e92\u76f8\u72ec\u7acb&#xff1a;A3 \u53ef\u89c6\u4e3a A2 \u4e0e A9 \u5728\u6388\u6743\u73af\u8282\u7684\u7279\u4f8b&#xff0c;A6 \u5728\u67d0\u4e9b\u5b9e\u73b0\u4e0b\u53ef\u7531 A10 \u63a8\u51fa\u3002\u672c\u4e66\u4ecd\u5c06\u5b83\u4eec\u5e76\u5217\u4e3a\u516c\u7406&#xff0c;\u7406\u7531\u662f\u5de5\u7a0b\u53ef\u68c0\u67e5\u6027\u2014\u2014\u6bcf\u4e00\u6761\u5bf9\u5e94\u4e00\u9879\u53ef\u4ee5\u5728\u5177\u4f53\u7cfb\u7edf\u4e0a\u5355\u72ec\u6838\u9a8c\u7684\u6027\u8d28\u3002\u8fd9\u662f\u9009\u62e9&#xff0c;\u4e0d\u662f\u6700\u5c0f\u516c\u7406\u96c6\u3002 \u82e5\u8ffd\u6c42\u6700\u5c0f\u6027&#xff0c;\u53ef\u538b\u7f29\u81f3\u516d\u6761&#xff0c;\u4ee3\u4ef7\u662f\u5931\u53bb\u9010\u6761\u5ba1\u8ba1\u7684\u4fbf\u5229\u3002<\/p>\n<hr \/>\n<hr \/>\n<h2>\u7b2c 3 \u7ae0\u3000\u5bf9\u6297\u6027\u5b8c\u6574 Adversarial Completeness<\/h2>\n<p>\u9898\u8bb0&#xff1a;\u5b89\u5168\u529f\u80fd\u8bf4\u660e\u7cfb\u7edf\u62e5\u6709\u4ec0\u4e48&#xff1b;\u5b89\u5168\u547d\u9898\u8bf4\u660e\u4ec0\u4e48\u4ecd\u7136\u4e0d\u80fd\u53d1\u751f\u3002<\/p>\n<hr \/>\n<h3>3.1 \u5b8c\u6574\u6027\u547d\u9898<\/h3>\n<h4>3.1.1 \u4e09\u9879\u975e\u8574\u542b\u5173\u7cfb<\/h4>\n<p>\u6267\u884c\u63a7\u5236\u673a\u5236\u7684\u5b58\u5728&#xff0c;\u4e0d\u7b49\u4e8e\u8be5\u673a\u5236\u5728\u5bf9\u6297\u6761\u4ef6\u4e0b\u6210\u7acb\u3002\u4e09\u79cd\u5e38\u89c1\u7684\u7b49\u540c\u5173\u7cfb\u5747\u4e0d\u6210\u7acb\u3002<\/p>\n<p>\u5176\u4e00&#xff0c;\u65e0\u7f3a\u9677\u4e0d\u7b49\u4e8e\u5b89\u5168\u3002 \u7f3a\u9677\u6307\u5b9e\u73b0\u504f\u79bb\u89c4\u683c\u3002\u4e00\u4e2a\u96f6\u7f3a\u9677\u7684\u7cfb\u7edf\u4ecd\u53ef\u80fd\u88ab\u653b\u7834&#xff0c;\u56e0\u4e3a\u5176\u89c4\u683c\u672c\u8eab\u53ef\u80fd\u672a\u8986\u76d6\u67d0\u7c7b\u653b\u51fb\u8def\u5f84\u3002\u6d4b\u8bd5\u4e0e\u5f62\u5f0f\u5316\u9a8c\u8bc1\u63d0\u9ad8\u7684\u662f\u5b9e\u73b0\u5bf9\u89c4\u683c\u7684\u5fe0\u5b9e\u5ea6&#xff0c;\u4e0d\u63d0\u9ad8\u89c4\u683c\u5bf9\u5a01\u80c1\u7684\u8986\u76d6\u5ea6\u3002<\/p>\n<p>\u5176\u4e8c&#xff0c;\u6b63\u786e\u8fd0\u884c\u4e0d\u7b49\u4e8e\u8fb9\u754c\u6210\u7acb\u3002 \u7cfb\u7edf\u5728\u9884\u671f\u8f93\u5165\u4e0b\u4ea7\u751f\u9884\u671f\u8f93\u51fa&#xff0c;\u53ea\u8bf4\u660e\u5b83\u5728\u8bbe\u8ba1\u573a\u666f\u4e2d\u5de5\u4f5c\u3002\u8fb9\u754c\u662f\u5426\u6210\u7acb&#xff0c;\u53d6\u51b3\u4e8e\u7cfb\u7edf\u5728\u975e\u9884\u671f\u8f93\u5165\u3001\u7ec4\u4ef6\u5931\u6548\u4e0e\u4e3b\u4f53\u6076\u610f\u65f6\u7684\u884c\u4e3a&#xff0c;\u800c\u8fd9\u4e9b\u72b6\u6001\u901a\u5e38\u4e0d\u51fa\u73b0\u5728\u529f\u80fd\u6d4b\u8bd5\u7684\u8f93\u5165\u96c6\u4e2d\u3002<\/p>\n<p>\u5176\u4e09&#xff0c;\u5c40\u90e8\u5b89\u5168\u4e0d\u7b49\u4e8e\u6574\u4f53\u5b89\u5168\u3002 \u8fd9\u662f\u547d\u9898 P1.1 \u5728\u5b89\u5168\u57df\u4e2d\u7684\u91cd\u8ff0&#xff1a;\u6bcf\u4e2a\u7ec4\u4ef6\u6ee1\u8db3\u81ea\u8eab\u5b89\u5168\u89c4\u683c&#xff0c;\u4e0d\u8574\u542b\u94fe\u7684\u7aef\u5230\u7aef\u5b89\u5168\u547d\u9898\u6210\u7acb\u3002\u8de8\u7ec4\u4ef6\u7684\u8f6c\u6362\u5173\u7cfb\u4e0d\u5c5e\u4e8e\u4efb\u4f55\u5355\u4e2a\u7ec4\u4ef6\u7684\u89c4\u683c\u3002<\/p>\n<p>\u5b9a\u4e49 D3.1.1&#xff08;\u5bf9\u6297\u6027\u5b8c\u6574 \/ Adversarial Completeness&#xff09; \u5728\u660e\u786e\u58f0\u660e\u7684\u5a01\u80c1\u6a21\u578b\u4e0e\u6545\u969c\u6a21\u578b\u4e4b\u4e0b&#xff0c;\u7cfb\u7edf\u7684\u5173\u952e\u6267\u884c\u7ea6\u675f\u4ecd\u7136\u6210\u7acb\u7684\u6027\u8d28\u3002\u5176\u6210\u7acb\u987b\u540c\u65f6\u660e\u786e&#xff1a;\u5a01\u80c1\u6a21\u578b\u7684\u8fb9\u754c\u3001\u56fa\u5b9a\u5b89\u5168\u5e95\u7ebf\u7684\u5185\u5bb9\u3001\u5141\u8bb8\u5931\u6548\u7684\u7ec4\u4ef6\u96c6\u5408\u3001\u4e0d\u5f97\u540c\u65f6\u5931\u6548\u7684\u4fe1\u4efb\u96c6\u5408\u3001\u5931\u6548\u65f6\u7cfb\u7edf\u8fdb\u5165\u7684\u72b6\u6001\u3001\u5fc5\u987b\u62d2\u7edd\u6267\u884c\u7684\u60c5\u5f62\u3001\u4ee5\u53ca\u53ef\u88ab\u72ec\u7acb\u9a8c\u8bc1\u7684\u7ed3\u8bba\u3002<\/p>\n<p>\u5b9a\u4e49\u4e2d&#034;\u660e\u786e\u58f0\u660e&#034;\u662f\u5b9e\u8d28\u8981\u6c42\u3002\u5bf9\u6297\u6027\u5b8c\u6574\u4e0d\u4e3b\u5f20&#034;\u65e0\u4eba\u80fd\u591f\u653b\u7834\u672c\u7cfb\u7edf&#034;\u2014\u2014\u4e0d\u5b58\u5728\u53ef\u62b5\u6297\u65e0\u9650\u8d44\u6e90\u3001\u4efb\u610f\u7269\u7406\u63a5\u89e6\u4e0e\u5168\u90e8\u653b\u51fb\u9762\u7684\u7cfb\u7edf\u3002\u5b83\u4e3b\u5f20\u7684\u662f\u4e00\u4e2a\u6709\u6761\u4ef6\u3001\u53ef\u8bc1\u4f2a\u7684\u547d\u9898&#xff1a;\u5728\u5df2\u58f0\u660e\u7684\u6a21\u578b\u5185&#xff0c;\u5373\u4f7f\u90e8\u5206\u7ec4\u4ef6\u88ab\u653b\u9677&#xff0c;\u5173\u952e\u7ea6\u675f\u4e0d\u88ab\u7ed5\u8fc7\u3002\u58f0\u660e\u8fb9\u754c\u662f\u8be5\u6027\u8d28\u7684\u7ec4\u6210\u90e8\u5206&#xff0c;\u800c\u975e\u5176\u514d\u8d23\u58f0\u660e\u3002<\/p>\n<h4>3.1.2 \u4ece\u5b89\u5168\u529f\u80fd\u5230\u5b89\u5168\u547d\u9898<\/h4>\n<p>\u5b89\u5168\u80fd\u529b\u5e38\u4ee5\u529f\u80fd\u6e05\u5355\u8868\u8fbe&#xff1a;\u591a\u56e0\u7d20\u8ba4\u8bc1\u3001\u591a\u91cd\u7b7e\u540d\u3001\u52a0\u5bc6\u4f20\u8f93\u3001\u786c\u4ef6\u5bc6\u94a5\u3001\u5ba1\u6279\u6d41\u7a0b\u3001\u98ce\u9669\u68c0\u6d4b\u3001\u5ba1\u8ba1\u7559\u75d5\u3002\u529f\u80fd\u6e05\u5355\u8bf4\u660e\u7cfb\u7edf\u62e5\u6709\u4ec0\u4e48&#xff0c;\u4e0d\u8bf4\u660e\u5728\u4ec0\u4e48\u6761\u4ef6\u4e0b\u4ec0\u4e48\u4e8b\u60c5\u4e0d\u80fd\u53d1\u751f&#xff0c;\u56e0\u800c\u4e0d\u53ef\u88ab\u8bc1\u4f2a\u3002<\/p>\n<p>\u5bf9\u6297\u6027\u5b8c\u6574\u8981\u6c42\u628a\u5b89\u5168\u8868\u8ff0\u4e3a\u547d\u9898\u3002\u547d\u9898\u7684\u5f62\u5f0f\u662f&#034;\u5373\u4f7f X&#xff0c;\u4ecd\u7136\u4e0d\u80fd Y&#034;&#xff1a;<\/p>\n<table>\n<tr>\u7f16\u53f7\u5b89\u5168\u547d\u9898<\/tr>\n<tbody>\n<tr>\n<td>SP-1<\/td>\n<td>\u5373\u4f7f SaaS \u88ab\u5b8c\u5168\u653b\u9677&#xff0c;\u653b\u51fb\u8005\u4ecd\u4e0d\u80fd\u7ed5\u8fc7\u786c\u4ef6\u8fb9\u754c\u83b7\u5f97\u6700\u7ec8\u6267\u884c\u80fd\u529b<\/td>\n<\/tr>\n<tr>\n<td>SP-2<\/td>\n<td>\u5373\u4f7f\u7ba1\u7406\u5458\u62e5\u6709\u6700\u9ad8\u4e1a\u52a1\u6743\u9650&#xff0c;\u4e5f\u4e0d\u80fd\u5173\u95ed\u56fa\u5316\u4e8e\u8fb9\u754c\u5185\u7684\u5b89\u5168\u5e95\u7ebf<\/td>\n<\/tr>\n<tr>\n<td>SP-3<\/td>\n<td>\u5373\u4f7f\u5ba1\u6279\u8d26\u6237\u6570\u91cf\u6ee1\u8db3\u8981\u6c42&#xff0c;\u82e5\u5176\u4e0d\u5177\u5907\u5173\u7cfb\u72ec\u7acb\u6027&#xff0c;\u7cfb\u7edf\u4e0d\u4ea7\u751f ALLOW<\/td>\n<\/tr>\n<tr>\n<td>SP-4<\/td>\n<td>\u5373\u4f7f\u6700\u7ec8 Payload \u643a\u5e26\u5408\u6cd5\u7b7e\u540d&#xff0c;\u82e5\u65e0\u6cd5\u4e0e\u610f\u56fe\u53ca\u5ba1\u6279\u5bf9\u8c61\u7ed1\u5b9a&#xff0c;\u6267\u884c\u88ab\u62d2\u7edd<\/td>\n<\/tr>\n<tr>\n<td>SP-5<\/td>\n<td>\u5373\u4f7f\u72b6\u6001\u65e0\u6cd5\u786e\u8ba4&#xff0c;\u7cfb\u7edf\u4e5f\u4e0d\u5c06\u672a\u77e5\u89e3\u91ca\u4e3a\u5b89\u5168<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u8868 3-1\u3000\u5b89\u5168\u547d\u9898\u793a\u4f8b<\/p>\n<p>\u6bcf\u4e00\u6761\u547d\u9898\u90fd\u6307\u5b9a\u4e86\u88ab\u5047\u5b9a\u5931\u5b88\u7684\u90e8\u5206&#xff0c;\u4ee5\u53ca\u5728\u8be5\u524d\u63d0\u4e0b\u4ecd\u987b\u4fdd\u6301\u7684\u7ed3\u8bba\u3002\u8fd9\u4e00\u5f62\u5f0f\u4f7f\u5b89\u5168\u4e3b\u5f20\u53ef\u88ab\u653b\u51fb\u6027\u6d4b\u8bd5\u76f4\u63a5\u68c0\u9a8c&#xff1a;\u6784\u9020\u6761\u4ef6 X&#xff0c;\u89c2\u5bdf Y \u662f\u5426\u53d1\u751f\u3002<\/p>\n<p>\u547d\u9898 P3.1&#xff08;\u53ef\u8bc1\u4f2a\u6027\u8981\u6c42&#xff09; \u4e0d\u6307\u660e\u5931\u5b88\u524d\u63d0\u7684\u5b89\u5168\u4e3b\u5f20\u4e0d\u53ef\u88ab\u8bc1\u4f2a&#xff0c;\u56e0\u800c\u4e0d\u6784\u6210\u5bf9\u6297\u6027\u5b8c\u6574\u7684\u8bc1\u636e\u3002<\/p>\n<p>\u7531\u6b64\u5f97\u5230\u672c\u7ae0\u7684\u65b9\u6cd5\u8bba\u7acb\u573a&#xff1a;\u58f0\u660e\u4e0d\u662f\u8bc1\u660e\u3002 \u7cfb\u7edf\u5177\u5907\u67d0\u9879\u673a\u5236&#xff0c;\u4e0e\u8be5\u673a\u5236\u5728\u653b\u9677\u6761\u4ef6\u4e0b\u4ecd\u7136\u751f\u6548&#xff0c;\u662f\u4e24\u4e2a\u72ec\u7acb\u7684\u95ee\u9898&#xff0c;\u540e\u8005\u987b\u5355\u72ec\u8bba\u8bc1\u3002<\/p>\n<hr \/>\n<h3>3.2 \u5a01\u80c1\u5206\u7c7b\u5b66 EX-STRIDE<\/h3>\n<h4>3.2.1 \u5206\u7c7b\u7ef4\u5ea6\u7684\u9009\u62e9<\/h4>\n<p>\u4f20\u7edf\u5a01\u80c1\u5efa\u6a21\u4ee5 STRIDE \u4e3a\u4ee3\u8868&#xff0c;\u5176\u5206\u7c7b\u7ef4\u5ea6\u9762\u5411\u6570\u636e\u4e0e\u8eab\u4efd&#xff1a;\u4eff\u5192\u3001\u7be1\u6539\u3001\u62b5\u8d56\u3001\u4fe1\u606f\u6cc4\u9732\u3001\u62d2\u7edd\u670d\u52a1\u3001\u6743\u9650\u63d0\u5347\u3002\u8be5\u7ef4\u5ea6\u9002\u914d\u7684\u95ee\u9898\u57df\u662f&#034;\u6570\u636e\u4e0e\u8bbf\u95ee\u7684\u5b89\u5168&#034;&#xff0c;\u4e0e\u6267\u884c\u63a7\u5236\u7684\u95ee\u9898\u57df\u4e0d\u91cd\u5408\u2014\u2014\u6267\u884c\u7f1d\u9699\u7684\u6210\u56e0\u662f\u8f6c\u6362\u5173\u7cfb\u7684\u65ad\u88c2&#xff08;D1.3.1&#xff09;&#xff0c;\u800c\u8f6c\u6362\u5173\u7cfb\u4e0d\u51fa\u73b0\u5728 STRIDE \u7684\u4efb\u4e00\u7c7b\u522b\u4e2d\u3002<\/p>\n<p>\u4e00\u79cd\u76f4\u89c9\u7684\u66ff\u4ee3\u505a\u6cd5\u662f\u6309\u5a01\u80c1\u4e3b\u4f53\u5206\u7c7b&#xff1a;AI\u3001\u7ba1\u7406\u5458\u3001\u5185\u90e8\u6210\u5458\u3001\u4f9b\u5e94\u94fe\u3001\u8bbe\u5907\u3001\u7f51\u7edc\u3002\u539f\u7a3f\u91c7\u7528\u8be5\u7ec4\u7ec7\u65b9\u5f0f&#xff0c;\u5176\u4f18\u70b9\u662f\u76f4\u89c2&#xff0c;\u7f3a\u70b9\u662f\u4e0d\u53ef\u95ed\u5408\u2014\u2014\u4e3b\u4f53\u96c6\u5408\u968f\u6280\u672f\u6f14\u8fdb\u6301\u7eed\u6269\u5f20&#xff0c;\u4efb\u4f55\u679a\u4e3e\u90fd\u4f1a\u8fc7\u65f6\u3002<\/p>\n<p>\u672c\u4e66\u6539\u6309\u53d7\u635f\u73af\u8282\u5206\u7c7b\u3002\u73af\u8282\u7531\u5224\u5b9a\u51fd\u6570\u7684\u53c2\u6570\u96c6\u5408\u51b3\u5b9a&#xff0c;\u800c\u53c2\u6570\u96c6\u5408\u662f\u6709\u9650\u4e14\u56fa\u5b9a\u7684&#xff1a;I\u3001x\u3001P\u3001K\u3001Ev\u3001cap\u3001\u0393 \u672c\u8eab\u3002\u56e0\u6b64\u6309\u73af\u8282\u5206\u7c7b\u53ef\u4ee5\u95ed\u5408&#xff1a;\u4efb\u4f55\u653b\u51fb\u82e5\u8981\u6539\u53d8\u6267\u884c\u7ed3\u679c&#xff0c;\u5fc5\u987b\u4f5c\u7528\u4e8e\u5176\u4e2d\u81f3\u5c11\u4e00\u9879\u3002\u4e3b\u4f53\u4fe1\u606f\u4e0d\u4e22\u5931&#xff0c;\u5b83\u964d\u7ea7\u4e3a\u6bcf\u4e00\u7c7b\u4e0b\u7684&#034;\u5178\u578b\u6765\u6e90&#034;\u3002<\/p>\n<h4>3.2.2 \u5206\u7c7b\u77e9\u9635<\/h4>\n<p>\u8868 3-2\u3000EX-STRIDE \u5a01\u80c1\u5206\u7c7b\u77e9\u9635<\/p>\n<table>\n<tr>\u7f16\u53f7\u653b\u51fb\u7c7b\u53d7\u635f\u73af\u8282\u5178\u578b\u6765\u6e90\u8fdd\u53cd\u516c\u7406\u5931\u8d25\u8bed\u4e49\u7f13\u89e3\u673a\u5236<\/tr>\n<tbody>\n<tr>\n<td>X1<\/td>\n<td>\u610f\u56fe\u4f2a\u9020<\/td>\n<td>I<\/td>\n<td>\u63d0\u793a\u8bcd\u6ce8\u5165\u3001\u88ab\u6c61\u67d3\u7684\u68c0\u7d22\u5185\u5bb9<\/td>\n<td>A1<\/td>\n<td>UNKNOWN<\/td>\n<td>\u610f\u56fe\u5bf9\u8c61\u7b7e\u540d\u3001\u6765\u6e90\u8bc1\u636e<\/td>\n<\/tr>\n<tr>\n<td>X2<\/td>\n<td>\u610f\u56fe\u6f02\u79fb<\/td>\n<td>I \u2192 x<\/td>\n<td>\u6a21\u578b\u8bef\u89e3\u3001\u591a\u8df3\u8f6c\u6362\u4e2d\u7ea6\u675f\u4e22\u5931<\/td>\n<td>A2<\/td>\n<td>CONFLICT<\/td>\n<td>I.inv \u9010\u8df3\u6821\u9a8c<\/td>\n<\/tr>\n<tr>\n<td>X3<\/td>\n<td>\u5bf9\u8c61\u66ff\u6362<\/td>\n<td>x<\/td>\n<td>\u5ba1\u6279\u540e\u53c2\u6570\u91cd\u5199\u3001Payload \u91cd\u65b0\u751f\u6210<\/td>\n<td>A3\u3001A9<\/td>\n<td>CONFLICT<\/td>\n<td>hash(x) \u7ed1\u5b9a\u3001\u91cd\u88c1\u51b3<\/td>\n<\/tr>\n<tr>\n<td>X4<\/td>\n<td>\u8bc1\u636e\u4f2a\u9020<\/td>\n<td>Ev<\/td>\n<td>\u4f2a\u9020\u5408\u89c4\u7ed3\u8bba\u3001\u5192\u7528\u6765\u6e90\u51ed\u636e<\/td>\n<td>A7<\/td>\n<td>UNKNOWN<\/td>\n<td>\u7b7e\u540d\u3001\u4e3b\u4f53\u7ed1\u5b9a<\/td>\n<\/tr>\n<tr>\n<td>X5<\/td>\n<td>\u8bc1\u636e\u5931\u6548<\/td>\n<td>Ev<\/td>\n<td>\u4f7f\u7528\u8fc7\u671f\u98ce\u63a7\u5feb\u7167\u3001\u590d\u7528\u65e7\u72b6\u6001<\/td>\n<td>A8\u3001A9<\/td>\n<td>EXPIRED<\/td>\n<td>\u6709\u6548\u671f\u5f3a\u5236\u3001\u91cd\u91c7\u96c6<\/td>\n<\/tr>\n<tr>\n<td>X6<\/td>\n<td>\u6743\u9650\u8d8a\u6743<\/td>\n<td>P \/ K<\/td>\n<td>\u7ba1\u7406\u5458\u5173\u95ed\u89c4\u5219\u3001\u914d\u7f6e\u63d0\u6743<\/td>\n<td>A4<\/td>\n<td>\u2014<\/td>\n<td>\u5baa\u6cd5\u56fa\u5316\u4e8e\u786c\u4ef6\u57df<\/td>\n<\/tr>\n<tr>\n<td>X7<\/td>\n<td>\u8fb9\u754c\u7ed5\u8fc7<\/td>\n<td>cap<\/td>\n<td>\u8bbe\u5907\u62c6\u89e3\u3001\u5bc6\u94a5\u5bfc\u51fa\u3001\u65c1\u8def\u901a\u9053<\/td>\n<td>A6\u3001A10<\/td>\n<td>\u2014<\/td>\n<td>\u72ec\u5360\u5fc5\u8981\u80fd\u529b\u3001\u9632\u62c6\u3001\u7194\u4e1d<\/td>\n<\/tr>\n<tr>\n<td>X8<\/td>\n<td>\u53ef\u7528\u6027\u80c1\u8feb<\/td>\n<td>\u0393<\/td>\n<td>\u9a8c\u8bc1\u670d\u52a1\u4e0d\u53ef\u8fbe\u8feb\u4f7f\u964d\u7ea7\u653e\u884c<\/td>\n<td>A8<\/td>\n<td>MISSING<\/td>\n<td>Fail Secure \u67b6\u6784\u5c5e\u6027<\/td>\n<\/tr>\n<tr>\n<td>X9<\/td>\n<td>\u4f9b\u5e94\u94fe\u6c61\u67d3<\/td>\n<td>\u5168\u94fe<\/td>\n<td>\u56fa\u4ef6\u4ea4\u4ed8\u524d\u66ff\u6362\u3001\u4f9d\u8d56\u6295\u6bd2<\/td>\n<td>A6<\/td>\n<td>UNKNOWN<\/td>\n<td>\u51fa\u5382\u8bc1\u660e\u3001\u8fdc\u7a0b\u8ba4\u8bc1<\/td>\n<\/tr>\n<tr>\n<td>X10<\/td>\n<td>\u7ec4\u5408\u653b\u51fb<\/td>\n<td>\u8de8\u73af\u8282<\/td>\n<td>X1&#043;X5\u3001X6&#043;X8 \u7b49\u8054\u5408\u5229\u7528<\/td>\n<td>\u591a\u6761<\/td>\n<td>\u6df7\u5408<\/td>\n<td>\u4e0d\u53d8\u91cf\u6d4b\u8bd5\u3001\u8de8\u73af\u8282\u5bf9\u6297\u6f14\u7ec3<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u77e9\u9635\u7684\u4f7f\u7528\u65b9\u5f0f\u662f\u9010\u5217\u800c\u975e\u9010\u884c&#xff1a;\u5bf9\u4e00\u4e2a\u5177\u4f53\u7cfb\u7edf&#xff0c;\u9010\u4e00\u68c0\u67e5\u6bcf\u4e2a\u73af\u8282\u662f\u5426\u5b58\u5728\u672a\u88ab\u8986\u76d6\u7684\u653b\u51fb\u7c7b&#xff0c;\u800c\u975e\u679a\u4e3e\u5df2\u77e5\u653b\u51fb\u624b\u6cd5\u3002\u624b\u6cd5\u4f1a\u66f4\u65b0&#xff0c;\u73af\u8282\u4e0d\u4f1a\u3002<\/p>\n<h4>3.2.3 \u6545\u969c\u4e0e\u653b\u51fb\u7684\u540c\u4e00\u5904\u7f6e<\/h4>\n<p>\u7ec4\u4ef6\u5931\u6548\u4e0e\u6076\u610f\u653b\u51fb\u5728\u6210\u56e0\u4e0a\u4e0d\u540c&#xff0c;\u5728\u5224\u5b9a\u8f93\u5165\u4e0a\u53ef\u80fd\u5b8c\u5168\u76f8\u540c&#xff1a;\u4e00\u4e2a\u56e0\u7f51\u7edc\u5206\u533a\u800c\u65e0\u6cd5\u83b7\u53d6\u7684\u8bc1\u636e&#xff0c;\u4e0e\u4e00\u4e2a\u88ab\u653b\u51fb\u8005\u963b\u65ad\u7684\u8bc1\u636e&#xff0c;\u5728 \u0393 \u770b\u6765\u90fd\u662f \u03c3(e) &#061; MISSING\u3002<\/p>\n<p>\u547d\u9898 P3.2&#xff08;\u6545\u969c\u4e0e\u653b\u51fb\u7684\u5224\u5b9a\u7b49\u4ef7&#xff09; \u82e5 \u0393 \u65e0\u6cd5\u533a\u5206\u67d0\u4e00\u8f93\u5165\u72b6\u6001\u7531\u6545\u969c\u8fd8\u662f\u653b\u51fb\u5bfc\u81f4&#xff0c;\u5219\u5bf9\u8be5\u72b6\u6001\u7684\u5904\u7f6e\u5fc5\u987b\u6309\u653b\u51fb\u5047\u8bbe\u6267\u884c\u3002\u6309\u6545\u969c\u5047\u8bbe\u653e\u5bbd\u5904\u7f6e&#xff0c;\u7b49\u4ef7\u4e8e\u5411\u653b\u51fb\u8005\u63d0\u4f9b\u4e00\u6761\u53ef\u4e3b\u52a8\u6784\u9020\u7684\u7ed5\u8fc7\u8def\u5f84\u3002<\/p>\n<p>P3.2 \u6392\u9664\u4e86\u4e00\u7c7b\u5e38\u89c1\u8bbe\u8ba1\u2014\u2014\u201c\u670d\u52a1\u5f02\u5e38\u65f6\u8df3\u8fc7\u68c0\u67e5\u201d\u3002\u5f02\u5e38\u662f\u653b\u51fb\u8005\u53ef\u4ee5\u5236\u9020\u7684\u6761\u4ef6&#xff0c;\u56e0\u6b64\u5f02\u5e38\u8def\u5f84\u4e0a\u7684\u5bbd\u677e\u5904\u7f6e\u5c31\u662f\u653b\u51fb\u9762\u672c\u8eab\u3002<\/p>\n<hr \/>\n<h3>3.3 \u56db\u6001\u8bed\u4e49\u4e0e\u72b6\u6001\u673a<\/h3>\n<h4>3.3.1 \u56db\u79cd\u975e\u6210\u7acb\u72b6\u6001<\/h4>\n<p>\u516c\u7406 A8 \u89c4\u5b9a\u8bc1\u636e\u72b6\u6001 \u03c3(e) \u2208 {VALID, UNKNOWN, MISSING, EXPIRED, CONFLICT}\u3002\u56db\u79cd\u975e VALID \u72b6\u6001\u7684\u6210\u56e0\u5f7c\u6b64\u72ec\u7acb&#xff1a;<\/p>\n<ul>\n<li>UNKNOWN&#xff1a;\u8bc1\u636e\u5df2\u63d0\u4ea4&#xff0c;\u4f46\u7cfb\u7edf\u65e0\u6cd5\u5b8c\u6210\u9a8c\u8bc1\u3002\u7cfb\u7edf\u4e0d\u77e5\u9053\u8be5\u4e8b\u5b9e\u662f\u5426\u6210\u7acb\u3002<\/li>\n<li>MISSING&#xff1a;\u5224\u5b9a\u6240\u9700\u7684\u8bc1\u636e\u672a\u63d0\u4ea4\u3002\u7cfb\u7edf\u7f3a\u5c11\u4f5c\u51fa\u5224\u65ad\u7684\u8f93\u5165\u3002<\/li>\n<li>EXPIRED&#xff1a;\u8bc1\u636e\u66fe\u7ecf\u6210\u7acb&#xff0c;\u5176\u6709\u6548\u671f\u5df2\u8fc7\u3002\u7cfb\u7edf\u6301\u6709\u7684\u662f\u5386\u53f2\u4e8b\u5b9e\u800c\u975e\u5f53\u524d\u4e8b\u5b9e\u3002<\/li>\n<li>CONFLICT&#xff1a;\u5b58\u5728\u4e0e\u4e4b\u77db\u76fe\u7684\u540c\u7c7b\u8bc1\u636e\u3002\u7cfb\u7edf\u540c\u65f6\u6301\u6709\u4e24\u4e2a\u4e0d\u80fd\u540c\u65f6\u4e3a\u771f\u7684\u65ad\u8a00\u3002<\/li>\n<\/ul>\n<p>\u56fe 3-1\u3000\u8bc1\u636e\u72b6\u6001\u8f6c\u79fb<\/p>\n<p>  #mermaid-svg-9JwRQciybb1PR0hr{font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;font-size:16px;fill:#333;}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#mermaid-svg-9JwRQciybb1PR0hr .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#mermaid-svg-9JwRQciybb1PR0hr .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#mermaid-svg-9JwRQciybb1PR0hr .error-icon{fill:#552222;}#mermaid-svg-9JwRQciybb1PR0hr .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-9JwRQciybb1PR0hr .edge-thickness-normal{stroke-width:1px;}#mermaid-svg-9JwRQciybb1PR0hr .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-9JwRQciybb1PR0hr .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-9JwRQciybb1PR0hr .edge-thickness-invisible{stroke-width:0;fill:none;}#mermaid-svg-9JwRQciybb1PR0hr .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-9JwRQciybb1PR0hr .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-9JwRQciybb1PR0hr .marker{fill:#333333;stroke:#333333;}#mermaid-svg-9JwRQciybb1PR0hr .marker.cross{stroke:#333333;}#mermaid-svg-9JwRQciybb1PR0hr svg{font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-9JwRQciybb1PR0hr p{margin:0;}#mermaid-svg-9JwRQciybb1PR0hr defs #statediagram-barbEnd{fill:#333333;stroke:#333333;}#mermaid-svg-9JwRQciybb1PR0hr g.stateGroup text{fill:#9370DB;stroke:none;font-size:10px;}#mermaid-svg-9JwRQciybb1PR0hr g.stateGroup text{fill:#333;stroke:none;font-size:10px;}#mermaid-svg-9JwRQciybb1PR0hr g.stateGroup .state-title{font-weight:bolder;fill:#131300;}#mermaid-svg-9JwRQciybb1PR0hr g.stateGroup rect{fill:#ECECFF;stroke:#9370DB;}#mermaid-svg-9JwRQciybb1PR0hr g.stateGroup line{stroke:#333333;stroke-width:1;}#mermaid-svg-9JwRQciybb1PR0hr .transition{stroke:#333333;stroke-width:1;fill:none;}#mermaid-svg-9JwRQciybb1PR0hr .stateGroup .composit{fill:white;border-bottom:1px;}#mermaid-svg-9JwRQciybb1PR0hr .stateGroup .alt-composit{fill:#e0e0e0;border-bottom:1px;}#mermaid-svg-9JwRQciybb1PR0hr .state-note{stroke:#aaaa33;fill:#fff5ad;}#mermaid-svg-9JwRQciybb1PR0hr .state-note text{fill:black;stroke:none;font-size:10px;}#mermaid-svg-9JwRQciybb1PR0hr .stateLabel .box{stroke:none;stroke-width:0;fill:#ECECFF;opacity:0.5;}#mermaid-svg-9JwRQciybb1PR0hr .edgeLabel .label rect{fill:#ECECFF;opacity:0.5;}#mermaid-svg-9JwRQciybb1PR0hr .edgeLabel{background-color:rgba(232,232,232, 0.8);text-align:center;}#mermaid-svg-9JwRQciybb1PR0hr .edgeLabel p{background-color:rgba(232,232,232, 0.8);}#mermaid-svg-9JwRQciybb1PR0hr .edgeLabel rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#mermaid-svg-9JwRQciybb1PR0hr .edgeLabel .label text{fill:#333;}#mermaid-svg-9JwRQciybb1PR0hr .label div .edgeLabel{color:#333;}#mermaid-svg-9JwRQciybb1PR0hr .stateLabel text{fill:#131300;font-size:10px;font-weight:bold;}#mermaid-svg-9JwRQciybb1PR0hr .node circle.state-start{fill:#333333;stroke:#333333;}#mermaid-svg-9JwRQciybb1PR0hr .node .fork-join{fill:#333333;stroke:#333333;}#mermaid-svg-9JwRQciybb1PR0hr .node circle.state-end{fill:#9370DB;stroke:white;stroke-width:1.5;}#mermaid-svg-9JwRQciybb1PR0hr .end-state-inner{fill:white;stroke-width:1.5;}#mermaid-svg-9JwRQciybb1PR0hr .node rect{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-svg-9JwRQciybb1PR0hr .node polygon{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-svg-9JwRQciybb1PR0hr #statediagram-barbEnd{fill:#333333;}#mermaid-svg-9JwRQciybb1PR0hr .statediagram-cluster rect{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-svg-9JwRQciybb1PR0hr .cluster-label,#mermaid-svg-9JwRQciybb1PR0hr .nodeLabel{color:#131300;}#mermaid-svg-9JwRQciybb1PR0hr .statediagram-cluster rect.outer{rx:5px;ry:5px;}#mermaid-svg-9JwRQciybb1PR0hr .statediagram-state .divider{stroke:#9370DB;}#mermaid-svg-9JwRQciybb1PR0hr .statediagram-state .title-state{rx:5px;ry:5px;}#mermaid-svg-9JwRQciybb1PR0hr .statediagram-cluster.statediagram-cluster .inner{fill:white;}#mermaid-svg-9JwRQciybb1PR0hr .statediagram-cluster.statediagram-cluster-alt .inner{fill:#f0f0f0;}#mermaid-svg-9JwRQciybb1PR0hr .statediagram-cluster .inner{rx:0;ry:0;}#mermaid-svg-9JwRQciybb1PR0hr .statediagram-state rect.basic{rx:5px;ry:5px;}#mermaid-svg-9JwRQciybb1PR0hr .statediagram-state rect.divider{stroke-dasharray:10,10;fill:#f0f0f0;}#mermaid-svg-9JwRQciybb1PR0hr .note-edge{stroke-dasharray:5;}#mermaid-svg-9JwRQciybb1PR0hr .statediagram-note rect{fill:#fff5ad;stroke:#aaaa33;stroke-width:1px;rx:0;ry:0;}#mermaid-svg-9JwRQciybb1PR0hr .statediagram-note rect{fill:#fff5ad;stroke:#aaaa33;stroke-width:1px;rx:0;ry:0;}#mermaid-svg-9JwRQciybb1PR0hr .statediagram-note text{fill:black;}#mermaid-svg-9JwRQciybb1PR0hr .statediagram-note .nodeLabel{color:black;}#mermaid-svg-9JwRQciybb1PR0hr .statediagram .edgeLabel{color:red;}#mermaid-svg-9JwRQciybb1PR0hr #dependencyStart,#mermaid-svg-9JwRQciybb1PR0hr #dependencyEnd{fill:#333333;stroke:#333333;stroke-width:1;}#mermaid-svg-9JwRQciybb1PR0hr .statediagramTitleText{text-anchor:middle;font-size:18px;fill:#333;}#mermaid-svg-9JwRQciybb1PR0hr :root{&#8211;mermaid-font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;} <\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>\u672a\u63d0\u4ea4<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>\u5df2\u63d0\u4ea4&#xff0c;\u9a8c\u8bc1\u672a\u5b8c\u6210<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>\u6765\u6e90\u4e0e\u7b7e\u540d\u6821\u9a8c\u901a\u8fc7<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>\u8865\u5145\u63d0\u4ea4\u5e76\u6821\u9a8c\u901a\u8fc7<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>t \u8d85\u51fa\u6709\u6548\u671f<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>\u51fa\u73b0\u77db\u76fe\u7684\u540c\u7c7b\u8bc1\u636e<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>\u91cd\u65b0\u7b7e\u53d1\u5e76\u6821\u9a8c<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>\u51b2\u7a81\u6e90\u88ab\u72ec\u7acb\u88c1\u5b9a\u5931\u6548<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>\u53c2\u4e0e\u5224\u5b9a\u8bc1\u660e \u03c0<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>MISSING<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>UNKNOWN<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>VALID<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>EXPIRED<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>CONFLICT<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>ALLOW_ELIGIBLE<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>DENY<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>SAFE_MODE<\/p>\n<p><\/span> <\/p>\n<p>CONFLICT \u5355\u72ec\u6307\u5411 SAFE_MODE \u800c\u975e DENY&#xff0c;\u662f\u56e0\u4e3a\u77db\u76fe\u8bc1\u636e\u610f\u5473\u7740\u7cfb\u7edf\u5bf9\u5f53\u524d\u72b6\u6001\u7684\u8ba4\u77e5\u672c\u8eab\u4e0d\u53ef\u9760\u3002\u6b64\u65f6\u4e0d\u4ec5\u672c\u6b21\u6267\u884c\u4e0d\u5e94\u653e\u884c&#xff0c;\u540c\u7c7b\u6267\u884c\u7684\u5224\u5b9a\u524d\u63d0\u4e5f\u5df2\u5b58\u7591&#xff0c;\u6545\u987b\u8fdb\u5165\u53d7\u9650\u72b6\u6001\u800c\u975e\u4ec5\u62d2\u7edd\u5355\u6b21\u8bf7\u6c42\u3002<\/p>\n<h4>3.3.2 \u4e0d\u53ef\u538b\u7f29\u6027<\/h4>\n<p>\u4e00\u79cd\u5e38\u89c1\u5b9e\u73b0\u5c06\u4e0a\u8ff0\u56db\u6001\u6620\u5c04\u4e3a\u5e03\u5c14\u503c&#xff1a;\u03c3(e) &#061; VALID \u8bb0\u4e3a true&#xff0c;\u5176\u4f59\u8bb0\u4e3a false\u3002\u8be5\u6620\u5c04\u5728\u653e\u884c\u5224\u5b9a\u4e0a\u65e0\u635f\u2014\u2014\u56db\u79cd\u72b6\u6001\u5747\u4e0d\u4ea7\u751f ALLOW\u2014\u2014\u4f46\u5728\u6062\u590d\u8def\u5f84\u4e0a\u6709\u635f\u3002<\/p>\n<p>\u8868 3-3\u3000\u56db\u6001\u5bf9\u5e94\u7684\u5904\u7f6e\u5dee\u5f02<\/p>\n<table>\n<tr>\u72b6\u6001\u7cfb\u7edf\u6240\u5904\u5883\u51b5\u6062\u590d\u52a8\u4f5c\u8d23\u4efb\u65b9<\/tr>\n<tbody>\n<tr>\n<td>MISSING<\/td>\n<td>\u7f3a\u5c11\u8f93\u5165<\/td>\n<td>\u8865\u5145\u63d0\u4ea4\u8bc1\u636e<\/td>\n<td>\u8bf7\u6c42\u53d1\u8d77\u65b9<\/td>\n<\/tr>\n<tr>\n<td>UNKNOWN<\/td>\n<td>\u65e0\u6cd5\u9a8c\u8bc1<\/td>\n<td>\u4fee\u590d\u9a8c\u8bc1\u901a\u9053\u3001\u66f4\u6362\u6765\u6e90<\/td>\n<td>\u7cfb\u7edf\u8fd0\u7ef4\u65b9<\/td>\n<\/tr>\n<tr>\n<td>EXPIRED<\/td>\n<td>\u4e8b\u5b9e\u5df2\u8fc7\u65f6<\/td>\n<td>\u91cd\u65b0\u91c7\u96c6\u3001\u91cd\u65b0\u7b7e\u53d1<\/td>\n<td>\u8bc1\u636e\u7b7e\u53d1\u65b9<\/td>\n<\/tr>\n<tr>\n<td>CONFLICT<\/td>\n<td>\u8ba4\u77e5\u4e0d\u4e00\u81f4<\/td>\n<td>\u72ec\u7acb\u88c1\u5b9a\u3001\u6392\u67e5\u6765\u6e90<\/td>\n<td>\u72ec\u7acb\u7b2c\u4e09\u65b9<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u547d\u9898 P3.3&#xff08;\u56db\u6001\u4e0d\u53ef\u538b\u7f29&#xff09; \u4ece\u56db\u6001\u5230\u5e03\u5c14\u503c\u7684\u6620\u5c04\u4e22\u5931\u6062\u590d\u8def\u5f84\u4fe1\u606f\u3002\u5728\u4e22\u5931\u8be5\u4fe1\u606f\u7684\u7cfb\u7edf\u4e2d&#xff0c;\u6240\u6709\u975e\u653e\u884c\u7ed3\u679c\u53ea\u80fd\u8868\u8ff0\u4e3a&#034;\u62d2\u7edd&#034;&#xff0c;\u8fd0\u7ef4\u65b9\u65e0\u6cd5\u786e\u5b9a\u5e94\u7531\u8c01\u91c7\u53d6\u4f55\u79cd\u52a8\u4f5c&#xff0c;\u5176\u540e\u679c\u662f\u62d2\u7edd\u5728\u5b9e\u8df5\u4e2d\u88ab\u7ed5\u8fc7\u800c\u975e\u88ab\u89e3\u51b3\u3002<\/p>\n<p>P3.3 \u7684\u5de5\u7a0b\u542b\u4e49\u5e38\u88ab\u4f4e\u4f30&#xff1a;\u4e00\u4e2a\u65e0\u6cd5\u8bf4\u660e\u62d2\u7edd\u539f\u56e0\u7684\u8fb9\u754c&#xff0c;\u4f1a\u56e0\u8fd0\u7ef4\u4e0d\u53ef\u884c\u800c\u88ab\u8981\u6c42\u5173\u95ed&#xff0c;\u6700\u7ec8\u4ee5\u914d\u7f6e\u5f00\u5173\u7684\u5f62\u5f0f\u5931\u53bb\u6548\u529b\u3002\u53ef\u89e3\u91ca\u6027\u4e0d\u662f\u8fb9\u754c\u7684\u9644\u52a0\u7279\u6027&#xff0c;\u800c\u662f\u5176\u5b58\u6d3b\u6761\u4ef6\u3002<\/p>\n<h4>3.3.3 \u672a\u77e5\u4e0d\u53ef\u88ab\u4e0a\u5c42\u89e3\u91ca\u6d88\u89e3<\/h4>\n<p>\u4e0a\u5c42\u7ec4\u4ef6\u5e38\u5177\u5907\u5c06\u672a\u77e5\u8f6c\u5316\u4e3a\u7ed3\u8bba\u7684\u80fd\u529b&#xff1a;\u6a21\u578b\u53ef\u4ee5\u7ed9\u51fa\u5408\u7406\u63a8\u6d4b&#xff0c;\u4e1a\u52a1\u7cfb\u7edf\u53ef\u4ee5\u91c7\u7528\u9ed8\u8ba4\u503c&#xff0c;\u8fd0\u7ef4\u6d41\u7a0b\u53ef\u4ee5\u6309\u7ecf\u9a8c\u5224\u65ad\u3002\u8fd9\u4e9b\u80fd\u529b\u5728\u4fe1\u606f\u5904\u7406\u4e2d\u6709\u4ef7\u503c&#xff0c;\u5728\u8fb9\u754c\u5224\u5b9a\u4e2d\u4e0d\u53ef\u91c7\u7eb3\u3002<\/p>\n<p>\u7406\u7531\u7531\u516c\u7406 A7 \u76f4\u63a5\u7ed9\u51fa&#xff1a;\u4e0a\u5c42\u63d0\u4ea4\u7684\u662f\u8bc1\u636e&#xff0c;\u4e0d\u662f\u7ed3\u8bba\u3002\u4e00\u4e2a&#034;\u6839\u636e\u5386\u53f2\u63a8\u65ad\u8be5\u8d26\u6237\u5408\u89c4&#034;\u7684\u5224\u65ad&#xff0c;\u5176\u672c\u8eab\u662f\u4e00\u9879\u5f85\u8bc1\u4e8b\u5b9e&#xff0c;\u4e0d\u662f\u5bf9\u5408\u89c4\u6027\u7684\u8bc1\u660e\u3002\u82e5\u5141\u8bb8\u8be5\u5224\u65ad\u66ff\u4ee3\u8bc1\u636e&#xff0c;\u5219\u4efb\u4f55\u7f3a\u5931\u90fd\u53ef\u901a\u8fc7\u589e\u52a0\u4e00\u5c42\u63a8\u65ad\u6d88\u89e3&#xff0c;A8 \u7684\u4fdd\u5b88\u95ed\u5408\u5931\u6548\u3002<\/p>\n<p>Unknown \u7684\u4ef7\u503c\u6070\u5728\u4e8e\u5b83\u662f\u4e00\u4e2a\u4e0d\u53ef\u88ab\u8bed\u8a00\u6d88\u89e3\u7684\u72b6\u6001\u3002\u5b83\u628a&#034;\u7cfb\u7edf\u4e0d\u77e5\u9053&#034;\u8fd9\u4e00\u4e8b\u5b9e\u4fdd\u7559\u5728\u5224\u5b9a\u94fe\u4e0a&#xff0c;\u4f7f\u5176\u65e0\u6cd5\u88ab\u63aa\u8f9e\u66f4\u81ea\u4fe1\u7684\u8868\u8ff0\u8986\u76d6\u3002<\/p>\n<hr \/>\n<h3>3.4 \u4fdd\u5b88\u9ed8\u8ba4\u4e0e Fail Secure<\/h3>\n<h4>3.4.1 Fail Open \u7684\u7ed3\u6784\u6027\u5438\u5f15\u529b<\/h4>\n<p>\u7528\u6237\u4e0d\u503e\u5411\u4e8e\u63a5\u53d7\u62d2\u7edd&#xff0c;\u4f01\u4e1a\u4e0d\u503e\u5411\u4e8e\u63a5\u53d7\u6d41\u7a0b\u4e2d\u65ad&#xff0c;\u81ea\u52a8\u5316\u5e73\u53f0\u4ee5\u4efb\u52a1\u5b8c\u6210\u7387\u4e3a\u6307\u6807&#xff0c;\u8bbe\u5907\u7cfb\u7edf\u4ee5\u6301\u7eed\u8fd0\u884c\u4e3a\u76ee\u6807\u3002\u8fd9\u4e9b\u538b\u529b\u5171\u540c\u4f5c\u7528\u4e8e\u5de5\u7a0b\u51b3\u7b56&#xff0c;\u4ea7\u751f\u4e00\u7ec4\u5e38\u89c1\u8bbe\u8ba1&#xff1a;\u7f51\u7edc\u65ad\u5f00\u65f6\u4f7f\u7528\u7f13\u5b58&#xff0c;\u8bc1\u636e\u7f3a\u5931\u65f6\u91c7\u7528\u9ed8\u8ba4\u503c&#xff0c;\u670d\u52a1\u5f02\u5e38\u65f6\u8df3\u8fc7\u68c0\u67e5&#xff0c;\u98ce\u63a7\u4e0d\u53ef\u7528\u65f6\u7ee7\u7eed\u4ea4\u6613&#xff0c;\u786c\u4ef6\u6545\u969c\u65f6\u5207\u6362\u8f6f\u4ef6\u6267\u884c&#xff0c;\u5ba1\u6279\u8d85\u65f6\u65f6\u6cbf\u7528\u65e7\u6388\u6743\u3002<\/p>\n<p>\u8fd9\u4e9b\u8bbe\u8ba1\u7684\u5171\u540c\u7ed3\u6784\u662f&#xff1a;\u7cfb\u7edf\u4e3a\u4e86\u7ee7\u7eed\u5de5\u4f5c&#xff0c;\u8ba9\u4fdd\u62a4\u673a\u5236\u81ea\u52a8\u9000\u5316\u3002 \u5176\u5371\u9669\u4e0d\u5728\u4e8e\u7cfb\u7edf\u8fdb\u5165\u4e86\u660e\u786e\u7684\u4e0d\u5b89\u5168\u6a21\u5f0f\u2014\u2014\u90a3\u662f\u53ef\u89c1\u7684\u3001\u53ef\u5ba1\u8ba1\u7684&#xff1b;\u800c\u5728\u4e8e\u9000\u5316\u662f\u9759\u9ed8\u7684&#xff0c;\u7cfb\u7edf\u5728\u5916\u89c2\u4e0a\u4ecd\u5728\u6b63\u5e38\u8fd0\u884c\u3002<\/p>\n<h4>3.4.2 \u4ee3\u4ef7\u4e0d\u5bf9\u79f0<\/h4>\n<p>\u662f\u5426\u91c7\u7528\u4fdd\u5b88\u9ed8\u8ba4&#xff0c;\u53d6\u51b3\u4e8e\u4e24\u7c7b\u9519\u8bef\u7684\u4ee3\u4ef7\u6bd4\u8f83\u3002<\/p>\n<p>\u8868 3-4\u3000\u8bef\u62d2\u7edd\u4e0e\u8bef\u653e\u884c\u7684\u4ee3\u4ef7\u7ed3\u6784<\/p>\n<table>\n<tr>\u8bef\u62d2\u7edd\u8bef\u653e\u884c<\/tr>\n<tbody>\n<tr>\n<td>\u76f4\u63a5\u540e\u679c<\/td>\n<td>\u5ef6\u8fdf\u3001\u4eba\u5de5\u590d\u6838\u3001\u6d41\u7a0b\u4e2d\u65ad<\/td>\n<td>\u73b0\u5b9e\u52a8\u4f5c\u5df2\u53d1\u751f<\/td>\n<\/tr>\n<tr>\n<td>\u53ef\u9006\u6027<\/td>\n<td>\u53ef\u9006<\/td>\n<td>\u901a\u5e38\u4e0d\u53ef\u9006<\/td>\n<\/tr>\n<tr>\n<td>\u53d1\u73b0\u65f6\u70b9<\/td>\n<td>\u7acb\u5373<\/td>\n<td>\u53ef\u80fd\u5ef6\u8fdf\u81f3\u540e\u679c\u663e\u73b0<\/td>\n<\/tr>\n<tr>\n<td>\u8865\u6551\u6210\u672c<\/td>\n<td>\u4e0e\u62d2\u7edd\u6b21\u6570\u6210\u6b63\u6bd4<\/td>\n<td>\u4e0e\u9519\u8bef\u534a\u5f84\u6210\u6b63\u6bd4<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u5728\u53ef\u56de\u6eda\u7684\u6570\u5b57\u64cd\u4f5c\u4e2d&#xff0c;\u4e24\u7c7b\u4ee3\u4ef7\u91cf\u7ea7\u63a5\u8fd1&#xff0c;\u53ef\u7528\u6027\u4f18\u5148\u662f\u5408\u7406\u9009\u62e9\u3002\u5728\u4e0d\u53ef\u9006\u7684\u73b0\u5b9e\u6267\u884c\u4e2d&#xff0c;\u4ee3\u4ef7\u9ad8\u5ea6\u4e0d\u5bf9\u79f0&#xff1a;\u8bef\u62d2\u7edd\u7684\u6210\u672c\u6709\u754c\u4e14\u53ef\u9884\u6d4b&#xff0c;\u8bef\u653e\u884c\u7684\u6210\u672c\u65e0\u754c\u4e14\u4e0d\u53ef\u56de\u6536\u3002<\/p>\n<p>\u5de5\u7a0b\u7ea6\u5b9a E3.1&#xff08;\u4fdd\u5b88\u9ed8\u8ba4&#xff09; \u5bf9\u4e0d\u53ef\u9006\u6267\u884c&#xff0c;\u5224\u5b9a\u7ec4\u4ef6\u7684\u9ed8\u8ba4\u8f93\u51fa\u4e3a\u975e ALLOW\u3002\u8be5\u7ea6\u5b9a\u7684\u4ee3\u4ef7\u662f\u53ef\u7528\u6027\u4e0b\u964d&#xff0c;\u5176\u4f9d\u636e\u662f\u8868 3-4 \u7684\u4ee3\u4ef7\u4e0d\u5bf9\u79f0\u6027&#xff0c;\u800c\u975e\u903b\u8f91\u5fc5\u7136\u3002\u5728\u53ef\u56de\u6eda\u573a\u666f\u4e2d&#xff0c;\u672c\u4e66\u4e0d\u4e3b\u5f20\u91c7\u7528\u8be5\u7ea6\u5b9a\u3002<\/p>\n<p>\u660e\u786e\u6807\u6ce8\u4e3a\u5de5\u7a0b\u7ea6\u5b9a\u800c\u975e\u516c\u7406&#xff0c;\u662f\u56e0\u4e3a\u5176\u6b63\u5f53\u6027\u4f9d\u8d56\u4e8e\u573a\u666f\u7684\u4e0d\u53ef\u9006\u6027\u8fd9\u4e00\u7ecf\u9a8c\u524d\u63d0\u3002\u82e5\u67d0\u7cfb\u7edf\u7684\u5168\u90e8\u52a8\u4f5c\u7686\u53ef\u65e0\u6210\u672c\u56de\u6eda&#xff0c;E3.1 \u4e0d\u9002\u7528\u3002<\/p>\n<h4>3.4.3 \u9ed8\u8ba4\u62d2\u7edd\u4e0d\u7b49\u4e8e\u6c38\u4e45\u62d2\u7edd<\/h4>\n<p>Fail Secure \u7684\u542b\u4e49\u662f&#034;\u5728\u8bc1\u660e\u6062\u590d\u4e4b\u524d\u4e0d\u7ee7\u7eed\u6267\u884c&#034;&#xff0c;\u4e0d\u662f&#034;\u9047\u5230\u5f02\u5e38\u5373\u6c38\u4e45\u505c\u6b62&#034;\u3002\u6062\u590d\u8fc7\u7a0b\u672c\u8eab\u88ab\u7eb3\u5165\u63a7\u5236&#xff1a;\u8bf7\u6c42\u65b0\u8bc1\u636e\u3001\u91cd\u65b0\u91c7\u96c6\u72b6\u6001\u3001\u91cd\u65b0\u5ba1\u6279\u3001\u5207\u6362\u72ec\u7acb\u9a8c\u8bc1\u901a\u9053\u3001\u8fdb\u5165\u53d7\u9650\u6a21\u5f0f\u3001\u7f29\u5c0f\u6267\u884c\u8303\u56f4\u3001\u8981\u6c42\u73b0\u573a\u4eba\u5de5\u786e\u8ba4\u3001\u6267\u884c\u9884\u5b9a\u4e49\u7684\u6062\u590d\u534f\u8bae\u3002<\/p>\n<p>Safe Mode \u662f\u8be5\u53d7\u9650\u72b6\u6001\u7684\u5177\u4f53\u5f62\u5f0f&#xff0c;\u5b83\u4e0d\u662f\u5173\u673a&#xff0c;\u800c\u662f\u4e00\u7ec4\u9884\u5148\u5b9a\u4e49\u7684\u80fd\u529b\u5b50\u96c6\u3002\u5178\u578b\u914d\u7f6e\u5305\u62ec&#xff1a;\u7981\u6b62\u65b0\u7684\u9ad8\u98ce\u9669\u6267\u884c\u3001\u53ea\u8bfb\u4e0d\u5199\u3001\u53ea\u5141\u8bb8\u64a4\u9500\u4e0d\u5141\u8bb8\u65b0\u589e\u3001\u53ea\u5141\u8bb8\u672c\u5730\u4e0d\u5141\u8bb8\u8fdc\u7a0b\u3001\u9650\u5236\u91d1\u989d\u4e0e\u901f\u7387\u3001\u8981\u6c42\u989d\u5916\u72ec\u7acb\u8bc1\u636e\u3001\u8981\u6c42\u73b0\u573a\u786e\u8ba4&#xff0c;\u540c\u65f6\u4fdd\u7559\u5fc5\u8981\u7684\u901a\u4fe1\u4e0e\u5ba1\u8ba1\u80fd\u529b\u3002\u5176\u8bbe\u8ba1\u76ee\u6807\u53ef\u8868\u8ff0\u4e3a\u4e00\u53e5&#xff1a;\u7cfb\u7edf\u5931\u53bb\u5b8c\u6574\u80fd\u529b\u65f6&#xff0c;\u4e0d\u5931\u53bb\u8fb9\u754c\u3002<\/p>\n<h4>3.4.4 Fail Secure \u662f\u67b6\u6784\u5c5e\u6027<\/h4>\n<p>\u82e5 Fail Secure \u8868\u73b0\u4e3a\u4e00\u9879\u914d\u7f6e&#xff0c;\u5b83\u53ef\u88ab\u5173\u95ed&#xff1b;\u82e5\u5b83\u4ec5\u7531\u4e0a\u5c42\u8f6f\u4ef6\u5b9e\u73b0&#xff0c;\u5b83\u53ef\u88ab\u7ed5\u8fc7&#xff1b;\u82e5\u5b89\u5168\u7cfb\u7edf\u5931\u6548\u540e\u4e1a\u52a1\u7cfb\u7edf\u4ecd\u80fd\u76f4\u63a5\u8c03\u7528\u6267\u884c\u80fd\u529b&#xff0c;\u5219\u7cfb\u7edf\u7684\u5b9e\u9645\u884c\u4e3a\u662f Fail Open&#xff0c;\u65e0\u8bba\u6587\u6863\u5982\u4f55\u63cf\u8ff0\u3002<\/p>\n<p>\u4fdd\u5b88\u9ed8\u8ba4\u987b\u4f53\u73b0\u4e8e\u67b6\u6784&#xff1a;\u6700\u7ec8\u6267\u884c\u80fd\u529b\u7531\u8fb9\u754c\u72ec\u5360&#xff08;A10&#xff09;&#xff1b;\u8fb9\u754c\u5931\u8054\u65f6\u4e0d\u5b58\u5728\u66ff\u4ee3\u8def\u5f84&#xff1b;\u5fc5\u8981\u8bc1\u636e\u7f3a\u5931\u65f6\u4e0d\u91ca\u653e\u80fd\u529b&#xff1b;\u4e0a\u5c42\u65e0\u6cd5\u81ea\u884c\u6784\u9020 ALLOW&#xff1b;\u6062\u590d\u987b\u91cd\u65b0\u5efa\u7acb\u5b8c\u6574\u8bc1\u660e\u3002<\/p>\n<p>\u7531\u6b64\u53ef\u5f97\u5bf9&#034;\u964d\u7ea7&#034;\u7684\u7ea6\u675f\u3002\u529f\u80fd\u964d\u7ea7\u4e0e\u5b89\u5168\u964d\u7ea7\u6027\u8d28\u4e0d\u540c&#xff1a;\u524d\u8005\u51cf\u5c11\u80fd\u529b&#xff0c;\u540e\u8005\u4e0d\u5f97\u53d6\u6d88\u5e95\u7ebf\u3002\u4e91\u670d\u52a1\u4e0d\u53ef\u7528\u65f6&#xff0c;\u7cfb\u7edf\u53ef\u4ee5\u505c\u6b62\u9ad8\u98ce\u9669\u8fdc\u7a0b\u6267\u884c\u3001\u4fdd\u7559\u672c\u5730\u53ea\u8bfb\u3001\u964d\u4f4e\u989d\u5ea6\u3001\u589e\u52a0\u73b0\u573a\u786e\u8ba4&#xff1b;\u4f46\u4e0d\u80fd\u5207\u6362\u4e3a&#034;\u4e91\u7aef\u9a8c\u8bc1\u5931\u8d25&#xff0c;\u6545\u7531\u672c\u5730\u7ba1\u7406\u5458\u76f4\u63a5\u6267\u884c&#034;\u3002\u540e\u8005\u4e0d\u662f\u964d\u7ea7&#xff0c;\u662f\u7ed5\u8fc7\u3002<\/p>\n<p>\u547d\u9898 P3.4&#xff08;\u964d\u7ea7\u7684\u754c\u9650&#xff09; \u4efb\u4f55\u964d\u7ea7\u8def\u5f84\u82e5\u4f7f\u7cfb\u7edf\u5728\u964d\u7ea7\u540e\u80fd\u591f\u6267\u884c\u964d\u7ea7\u524d\u88ab K \u7981\u6b62\u7684\u52a8\u4f5c&#xff0c;\u5219\u8be5\u8def\u5f84\u662f\u4e00\u6761\u7ed5\u8fc7\u8def\u5f84&#xff0c;\u800c\u975e\u964d\u7ea7\u8bbe\u8ba1\u3002<\/p>\n<h4>3.4.5 \u7d27\u6025\u673a\u5236<\/h4>\n<p>\u591a\u6570\u7cfb\u7edf\u4e3a\u5f02\u5e38\u60c5\u5f62\u4fdd\u7559 Break Glass \u673a\u5236&#xff0c;\u8fd9\u5728\u73b0\u5b9e\u8fd0\u8425\u4e2d\u5f80\u5f80\u5fc5\u8981\u3002\u4f46\u7d27\u6025\u673a\u5236\u662f\u6700\u6613\u88ab\u6ee5\u7528\u7684\u8def\u5f84&#xff1a;\u82e5&#034;\u7d27\u6025&#034;\u53ef\u7531\u5355\u4e00\u7ba1\u7406\u5458\u58f0\u660e&#xff0c;\u7d27\u6025\u6a21\u5f0f\u53ef\u5173\u95ed\u5168\u90e8\u9a8c\u8bc1&#xff0c;\u4e14\u4e8b\u540e\u7f3a\u5c11\u72ec\u7acb\u8bc1\u636e&#xff0c;\u5219\u653b\u51fb\u8005\u7684\u76ee\u6807\u7b80\u5316\u4e3a\u83b7\u53d6\u7d27\u6025\u6743\u9650\u3002<\/p>\n<p>\u5bf9\u6297\u6027\u5b8c\u6574\u4e0d\u8981\u6c42\u53d6\u6d88\u7d27\u6025\u64cd\u4f5c&#xff0c;\u8981\u6c42\u7684\u662f\u5bf9\u5176\u52a0\u4ee5\u7ea6\u675f&#xff1a;\u8303\u56f4\u660e\u786e\u3001\u89e6\u53d1\u6761\u4ef6\u53ef\u8bc1\u660e\u3001\u6743\u9650\u6700\u5c0f\u5316\u3001\u65f6\u9650\u6709\u9650\u3001\u64cd\u4f5c\u4e0d\u53ef\u9690\u85cf\u3001\u987b\u72ec\u7acb\u8bb0\u5f55&#xff0c;\u4e14\u90e8\u5206\u56fa\u5b9a\u5e95\u7ebf\u5728\u7d27\u6025\u6a21\u5f0f\u4e0b\u4ecd\u4e0d\u53ef\u5173\u95ed\u3002\u7d27\u6025\u60c5\u51b5\u53ef\u4ee5\u6539\u53d8\u7b56\u7565 P&#xff0c;\u4e0d\u5e94\u4f7f\u5baa\u6cd5 K \u6d88\u5931\u3002<\/p>\n<hr \/>\n<h3>3.5 \u9a8c\u8bc1\u65b9\u6cd5\u4e0e\u6b8b\u4f59\u98ce\u9669<\/h3>\n<p>\u5bf9\u6297\u6027\u5b8c\u6574\u987b\u4ee5\u53ef\u6267\u884c\u7684\u9a8c\u8bc1\u6d3b\u52a8\u652f\u6491&#xff0c;\u5176\u6700\u5c0f\u96c6\u5408\u5305\u542b\u4e94\u9879&#xff1a;\u5a01\u80c1\u6a21\u578b&#xff08;\u660e\u786e\u58f0\u660e\u5047\u5b9a\u7684\u653b\u51fb\u8005\u80fd\u529b\u4e0e\u5141\u8bb8\u5931\u6548\u7684\u7ec4\u4ef6&#xff09;&#xff1b;\u5931\u8d25\u77e9\u9635&#xff08;\u679a\u4e3e\u5173\u952e\u5931\u8d25\u65b9\u5f0f\u53ca\u5176\u5bf9\u5e94\u5904\u7f6e&#xff0c;\u89c1\u9644\u5f55 C&#xff09;&#xff1b;\u4e0d\u53d8\u91cf&#xff08;\u5728\u4efb\u4f55\u8f93\u5165\u4e0e\u72b6\u6001\u4e0b\u987b\u4fdd\u6301\u4e3a\u771f\u7684\u6027\u8d28&#xff0c;\u4f5c\u4e3a\u81ea\u52a8\u5316\u6d4b\u8bd5\u7684\u65ad\u8a00&#xff09;&#xff1b;\u5bf9\u6297\u6d4b\u8bd5&#xff08;\u6309\u8868 3-2 \u9010\u73af\u8282\u6784\u9020\u653b\u51fb\u6761\u4ef6&#xff0c;\u9a8c\u8bc1\u8868 3-1 \u7684\u5b89\u5168\u547d\u9898&#xff09;&#xff1b;\u63a7\u5236\u5931\u6548\u7684\u8bc1\u660e\u65b9\u5f0f&#xff08;\u9884\u5148\u5b9a\u4e49\u5982\u4f55\u68c0\u6d4b\u8fb9\u754c\u5df2\u88ab\u7ed5\u8fc7&#xff0c;\u800c\u975e\u4f9d\u8d56\u4e8b\u540e\u53d1\u73b0&#xff09;\u3002<\/p>\n<p>\u672c\u4e66\u4e0d\u8986\u76d6\u4ee5\u4e0b\u60c5\u5f62&#xff0c;\u987b\u5728\u91c7\u7528\u5176\u7ed3\u8bba\u65f6\u53e6\u884c\u5904\u7406&#xff1a;\u7269\u7406\u63a5\u89e6\u65e0\u9650\u5236\u4e14\u65f6\u95f4\u65e0\u9650\u7684\u653b\u51fb\u8005&#xff1b;\u8fb9\u754c\u786c\u4ef6\u5728\u5236\u9020\u73af\u8282\u5373\u88ab\u690d\u5165\u540e\u95e8\u4e14\u65e0\u8fdc\u7a0b\u8ba4\u8bc1\u624b\u6bb5\u7684\u60c5\u5f62&#xff1b;\u5168\u90e8\u72ec\u7acb\u8bc1\u636e\u6765\u6e90\u540c\u65f6\u88ab\u540c\u4e00\u4e3b\u4f53\u63a7\u5236\u7684\u60c5\u5f62&#xff1b;\u4ee5\u53ca\u6267\u884c\u52a8\u4f5c\u672c\u8eab\u53ef\u9006\u800c\u4f7f E3.1 \u4e0d\u9002\u7528\u7684\u573a\u666f\u3002\u660e\u786e\u5217\u51fa\u672a\u8986\u76d6\u8303\u56f4\u662f D3.1.1 \u7684\u7ec4\u6210\u90e8\u5206\u2014\u2014\u672a\u58f0\u660e\u8fb9\u754c\u7684\u5b8c\u6574\u6027\u4e3b\u5f20&#xff0c;\u4e0d\u6784\u6210\u5b8c\u6574\u6027\u3002<\/p>\n<hr \/>\n<h2>\u7b2c 4 \u7ae0\u3000EBL \u6267\u884c\u8fb9\u754c\u8bed\u8a00<\/h2>\n<p>\u9898\u8bb0&#xff1a;\u8fb9\u754c\u8bed\u8a00\u7684\u4ef7\u503c\u4e0d\u5728\u4e8e\u4ec0\u4e48\u90fd\u80fd\u505a&#xff0c;\u800c\u5728\u4e8e\u5b83\u505a\u4e0d\u5230\u4e0d\u8be5\u505a\u7684\u4e8b\u3002<\/p>\n<hr \/>\n<hr \/>\n<h3>4.1 \u73b0\u6709\u8868\u8fbe\u5f62\u5f0f\u7684\u4e0d\u8db3<\/h3>\n<h4>4.1.1 \u8fb9\u754c\u8bed\u8a00\u7684\u4e94\u9879\u8981\u6c42<\/h4>\n<p>\u7b2c 2\u30013 \u7ae0\u7684\u7ed3\u8bba\u5bf9\u8868\u8fbe\u6267\u884c\u8fb9\u754c\u89c4\u5219\u7684\u5f62\u5f0f\u63d0\u51fa\u4e86\u5177\u4f53\u8981\u6c42\u3002\u4efb\u4f55\u5019\u9009\u8868\u8fbe\u5f62\u5f0f\u987b\u540c\u65f6\u6ee1\u8db3&#xff1a;<\/p>\n<li>\u786e\u5b9a\u6027\u2014\u2014\u76f8\u540c\u89c4\u5219\u4e0e\u76f8\u540c\u8f93\u5165\u4ea7\u751f\u76f8\u540c (d, \u03c0)&#xff08;\u0393 \u7684\u786e\u5b9a\u6027\u6027\u8d28&#xff09;\u3002<\/li>\n<li>\u5fc5\u7136\u7ec8\u6b62\u2014\u2014\u88c1\u51b3\u5728\u6709\u754c\u6b65\u9aa4\u5185\u5b8c\u6210&#xff0c;\u4e14\u6700\u574f\u60c5\u51b5\u53ef\u9884\u5148\u8ba1\u7b97&#xff08;Final Veto \u4e0d\u80fd\u65e0\u9650\u7b49\u5f85&#xff09;\u3002<\/li>\n<li>\u53ef\u9759\u6001\u5206\u6790\u2014\u2014\u89c4\u5219\u5728\u90e8\u7f72\u524d\u53ef\u88ab\u5ba1\u67e5&#xff0c;\u5176\u53ef\u8fbe\u7ed3\u8bba\u53ef\u88ab\u679a\u4e3e\u3002<\/li>\n<li>\u8f93\u5165\u5c01\u95ed\u2014\u2014\u89c4\u5219\u4e0d\u8bfb\u53d6\u672a\u58f0\u660e\u7684\u6570\u636e&#xff0c;\u88c1\u51b3\u8fc7\u7a0b\u4e0d\u4ea7\u751f\u526f\u4f5c\u7528&#xff08;A7 \u4e0e\u88c1\u51b3\u6267\u884c\u5206\u79bb&#xff09;\u3002<\/li>\n<li>\u53ef\u751f\u6210\u8bc1\u660e\u2014\u2014\u6c42\u503c\u8fc7\u7a0b\u53ef\u8f93\u51fa \u03c0 \u5e76\u88ab\u91cd\u653e&#xff08;A8&#xff09;\u3002<\/li>\n<p>\u4ee5\u8fd9\u4e94\u9879\u4e3a\u5224\u636e&#xff0c;\u8003\u5bdf\u73b0\u6709\u7684\u4e94\u7c7b\u8868\u8fbe\u5f62\u5f0f\u3002<\/p>\n<p>\u8868 4-1\u3000\u73b0\u6709\u8868\u8fbe\u5f62\u5f0f\u4e0e\u8fb9\u754c\u8bed\u8a00\u8981\u6c42\u7684\u5bf9\u7167<\/p>\n<table>\n<tr>\u5f62\u5f0f\u80fd\u8868\u8fbe\u4ec0\u4e48\u4e3b\u8981\u7f3a\u53e3<\/tr>\n<tbody>\n<tr>\n<td>JSON<\/td>\n<td>\u6570\u636e\u7ed3\u6784\u4e0e\u53d6\u503c<\/td>\n<td>\u53ea\u63cf\u8ff0\u7ed3\u6784&#xff0c;\u4e0d\u8868\u8fbe\u6761\u4ef6\u3001\u5173\u7cfb\u4e0e\u7ed1\u5b9a&#xff1b;\u65e0\u6c42\u503c\u8bed\u4e49&#xff0c;\u6545\u65e0\u4ece\u751f\u6210\u8bc1\u660e<\/td>\n<\/tr>\n<tr>\n<td>YAML<\/td>\n<td>\u540c\u4e0a&#xff0c;\u53ef\u8bfb\u6027\u66f4\u597d<\/td>\n<td>\u53ef\u8bfb\u6027\u6539\u5584\u4e0d\u6539\u53d8\u8868\u8fbe\u80fd\u529b&#xff1b;\u7f3a\u53e3\u4e0e JSON \u76f8\u540c<\/td>\n<\/tr>\n<tr>\n<td>\u7b56\u7565\u5f15\u64ce&#xff08;\u8bbf\u95ee\u63a7\u5236\u7c7b&#xff09;<\/td>\n<td>\u4e3b\u4f53\u3001\u8d44\u6e90\u3001\u52a8\u4f5c\u4e09\u5143\u7ec4\u4e0a\u7684\u5141\u8bb8\u4e0e\u62d2\u7edd<\/td>\n<td>\u5224\u5b9a\u5bf9\u8c61\u662f\u8bbf\u95ee\u8bf7\u6c42\u800c\u975e\u6700\u7ec8\u6267\u884c\u5bf9\u8c61&#xff1b;\u4e0d\u8868\u8fbe\u610f\u56fe\u7ed1\u5b9a\u4e0e\u8bc1\u636e\u65f6\u6548<\/td>\n<\/tr>\n<tr>\n<td>\u901a\u7528\u7f16\u7a0b\u8bed\u8a00<\/td>\n<td>\u4efb\u610f\u53ef\u8ba1\u7b97\u8fc7\u7a0b<\/td>\n<td>\u8fdd\u53cd\u8981\u6c42 2\u30013\u30014&#xff1a;\u65e0\u754c\u5faa\u73af\u3001\u4efb\u610f\u9012\u5f52\u3001\u9690\u5f0f\u5916\u90e8\u8c03\u7528\u4e0e\u526f\u4f5c\u7528<\/td>\n<\/tr>\n<tr>\n<td>\u81ea\u7136\u8bed\u8a00<\/td>\n<td>\u4efb\u610f\u8bed\u4e49&#xff0c;\u542b\u6a21\u7cca\u4e0e\u4f8b\u5916<\/td>\n<td>\u8fdd\u53cd\u8981\u6c42 1&#xff1a;\u89e3\u91ca\u4f9d\u8d56\u4e0a\u4e0b\u6587\u4e0e\u63aa\u8f9e&#xff0c;\u540c\u4e00\u89c4\u5219\u53ef\u5f97\u4e0d\u540c\u7ed3\u8bba<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u524d\u4e24\u7c7b\u7684\u7f3a\u53e3\u5728\u4e8e\u8868\u8fbe\u80fd\u529b\u4e0d\u8db3&#xff0c;\u540e\u4e24\u7c7b\u7684\u7f3a\u53e3\u5728\u4e8e\u8868\u8fbe\u80fd\u529b\u8fc7\u5269\u3002\u8fd9\u4e00\u5bf9\u6bd4\u7ed9\u51fa\u4e86 EBL \u7684\u8bbe\u8ba1\u5b9a\u4f4d\u3002<\/p>\n<h4>4.1.2 \u975e\u56fe\u7075\u5b8c\u5907\u662f\u8981\u6c42\u800c\u975e\u7f3a\u9677<\/h4>\n<p>\u56fe\u7075\u5b8c\u5907\u610f\u5473\u7740\u8bed\u8a00\u53ef\u8868\u8fbe\u4efb\u610f\u53ef\u8ba1\u7b97\u8fc7\u7a0b\u3002\u5bf9\u901a\u7528\u5f00\u53d1\u8fd9\u662f\u80fd\u529b&#xff0c;\u5bf9\u6267\u884c\u8fb9\u754c\u8fd9\u662f\u8d1f\u62c5&#xff1a;\u65e0\u754c\u5faa\u73af\u3001\u4efb\u610f\u9012\u5f52\u3001\u52a8\u6001\u5185\u5b58\u589e\u957f\u3001\u4e0d\u53ef\u9884\u6d4b\u7684\u7ec8\u6b62\u65f6\u95f4\u4e0e\u96be\u4ee5\u9759\u6001\u5206\u6790\u7684\u63a7\u5236\u6d41&#xff0c;\u4f7f\u7cfb\u7edf\u65e0\u6cd5\u9884\u5148\u4fdd\u8bc1\u67d0\u6761\u89c4\u5219\u4e00\u5b9a\u7ec8\u6b62&#xff0c;\u4e5f\u65e0\u6cd5\u8ba1\u7b97\u5176\u8d44\u6e90\u4e0a\u754c\u3002<\/p>\n<p>\u800c\u8fb9\u754c\u987b\u77e5\u9053&#xff1a;\u89c4\u5219\u4e00\u5b9a\u7ed3\u675f\u3001\u6700\u574f\u6b65\u9aa4\u6570\u3001\u5185\u5b58\u4e0a\u754c\u3001\u4e0d\u8bbf\u95ee\u672a\u58f0\u660e\u6570\u636e\u3001\u88c1\u51b3\u4e2d\u4e0d\u4ea7\u751f\u526f\u4f5c\u7528\u3002<\/p>\n<p>\u547d\u9898 P4.1&#xff08;\u8868\u8fbe\u80fd\u529b\u7684\u4e0a\u754c&#xff09; \u6ee1\u8db3\u8981\u6c42 2 \u4e0e\u8981\u6c42 3 \u7684\u8bed\u8a00\u4e0d\u80fd\u662f\u56fe\u7075\u5b8c\u5907\u7684\u3002\u56e0\u6b64 EBL \u4e3b\u52a8\u653e\u5f03\u56fe\u7075\u5b8c\u5907\u4e0d\u662f\u80fd\u529b\u59a5\u534f&#xff0c;\u800c\u662f\u8981\u6c42\u7684\u76f4\u63a5\u63a8\u8bba\u3002<\/p>\n<p>EBL \u56e0\u6b64\u5728\u8bed\u8a00\u8c31\u7cfb\u4e0a\u66f4\u63a5\u8fd1\u9632\u706b\u5899\u89c4\u5219\u3001\u5305\u8fc7\u6ee4\u8bed\u8a00\u3001\u6709\u9650\u72b6\u6001\u673a\u4e0e\u58f0\u660e\u5f0f\u7ea6\u675f\u8bed\u8a00&#xff0c;\u800c\u975e\u901a\u7528\u7a0b\u5e8f\u8bbe\u8ba1\u8bed\u8a00\u3002\u5b83\u4e0d\u9700\u8981\u56de\u7b54\u4efb\u610f\u8ba1\u7b97\u95ee\u9898&#xff0c;\u53ea\u9700\u56de\u7b54\u4e00\u4e2a\u6709\u9650\u95ee\u9898&#xff1a;\u5728\u7ed9\u5b9a\u89c4\u5219\u4e0e\u5b8c\u6574\u8f93\u5165\u4e0b&#xff0c;\u672c\u6b21\u5019\u9009\u6267\u884c\u662f\u5426\u5141\u8bb8\u8de8\u8d8a\u8fb9\u754c\u3002<\/p>\n<h4>4.1.3 \u81ea\u7136\u8bed\u8a00\u4e0d\u80fd\u4f5c\u4e3a\u6700\u7ec8\u89c4\u5219<\/h4>\n<p>\u4e00\u79cd\u81ea\u7136\u7684\u8bbe\u60f3\u662f&#xff1a;\u65e2\u7136\u6a21\u578b\u80fd\u591f\u7406\u89e3\u81ea\u7136\u8bed\u8a00&#xff0c;\u5b89\u5168\u7b56\u7565\u4e5f\u53ef\u76f4\u63a5\u4ee5\u81ea\u7136\u8bed\u8a00\u4e66\u5199\u3002\u8be5\u8bbe\u60f3\u5728\u89c4\u5219\u751f\u6210\u73af\u8282\u53ef\u884c&#xff0c;\u5728\u89c4\u5219\u88c1\u51b3\u73af\u8282\u4e0d\u53ef\u884c\u3002<\/p>\n<p>\u7406\u7531\u662f\u8981\u6c42 1\u3002\u81ea\u7136\u8bed\u8a00\u89c4\u5219\u7684\u7ed3\u8bba\u4f9d\u8d56\u89e3\u91ca&#xff0c;\u800c\u89e3\u91ca\u4f9d\u8d56\u4e0a\u4e0b\u6587\u3001\u63aa\u8f9e\u4e0e\u89e3\u91ca\u8005\u72b6\u6001\u3002\u540c\u4e00\u6761&#034;\u5927\u989d\u8f6c\u8d26\u9700\u8981\u989d\u5916\u5ba1\u6279&#034;&#xff0c;\u5728\u4e0d\u540c\u4e0a\u4e0b\u6587\u4e2d\u5bf9&#034;\u5927\u989d&#034;\u7684\u5224\u5b9a\u53ef\u4ee5\u4e0d\u540c&#xff1b;\u540c\u4e00\u6761\u89c4\u5219\u7531\u4e0d\u540c\u6a21\u578b\u6216\u540c\u4e00\u6a21\u578b\u5728\u4e0d\u540c\u63d0\u793a\u4e0b\u6c42\u503c&#xff0c;\u53ef\u5f97\u4e0d\u540c\u7ed3\u8bba\u3002\u88c1\u51b3\u56e0\u6b64\u4e0d\u53ef\u590d\u73b0&#xff0c;\u03c0 \u65e0\u6cd5\u91cd\u653e&#xff0c;A8 \u6240\u8981\u6c42\u7684\u5b8c\u6574\u8bc1\u660e\u5931\u53bb\u610f\u4e49\u3002<\/p>\n<p>\u53ef\u884c\u7684\u5206\u5de5\u662f&#xff1a;\u81ea\u7136\u8bed\u8a00\u7528\u4e8e\u8868\u8fbe\u610f\u56fe\u4e0e\u8d77\u8349\u89c4\u5219&#xff0c;EBL \u7528\u4e8e\u56fa\u5316\u4e0e\u88c1\u51b3\u89c4\u5219\u3002\u6a21\u578b\u53ef\u4ee5\u628a\u4e1a\u52a1\u63cf\u8ff0\u8f6c\u5199\u4e3a EBL \u89c4\u5219\u4f9b\u4eba\u5ba1\u9605&#xff0c;\u4f46\u4e0d\u53c2\u4e0e\u89c4\u5219\u7684\u6c42\u503c\u3002<\/p>\n<p>\u5de5\u7a0b\u7ea6\u5b9a E4.1&#xff08;\u751f\u6210\u4e0e\u88c1\u51b3\u5206\u79bb&#xff09; \u5141\u8bb8\u6a21\u578b\u751f\u6210 EBL \u89c4\u5219&#xff0c;\u4e0d\u5141\u8bb8\u6a21\u578b\u5145\u5f53 EBL \u6c42\u503c\u5668\u3002\u751f\u6210\u7ed3\u679c\u987b\u7ecf\u4eba\u5de5\u6216\u786e\u5b9a\u6027\u5de5\u5177\u5ba1\u67e5\u540e\u65b9\u53ef\u90e8\u7f72\u3002\u8be5\u7ea6\u5b9a\u7684\u4ee3\u4ef7\u662f\u89c4\u5219\u53d8\u66f4\u901f\u5ea6\u4e0b\u964d\u3002<\/p>\n<hr \/>\n<h3>4.2 \u6267\u884c\u8fb9\u754c\u7684\u6027\u8d28<\/h3>\n<h4>4.2.1 \u5b9a\u4e49<\/h4>\n<p>\u5b9a\u4e49 D4.2.1&#xff08;\u6267\u884c\u8fb9\u754c \/ Execution Boundary&#xff09; \u5019\u9009\u6267\u884c\u987b\u83b7\u5f97\u653e\u884c\u624d\u80fd\u8de8\u8d8a\u3001\u4e14\u8de8\u8d8a\u540e\u52a8\u4f5c\u5373\u8fdb\u5165\u73b0\u5b9e\u7684\u5355\u5411\u63a7\u5236\u70b9\u3002\u6267\u884c\u8fb9\u754c\u7531\u4e24\u90e8\u5206\u6784\u6210&#xff1a;\u4e00\u7ec4\u53ef\u6c42\u503c\u7684\u89c4\u5219&#xff0c;\u4ee5\u53ca\u5bf9\u67d0\u9879\u5fc5\u8981\u80fd\u529b cap \u7684\u72ec\u5360\u3002<\/p>\n<p>\u5b9a\u4e49\u5f3a\u8c03&#034;\u4e24\u90e8\u5206\u6784\u6210&#034;&#xff0c;\u56e0\u4e3a\u4e8c\u8005\u7f3a\u4e00\u65f6\u8fb9\u754c\u5747\u4e0d\u6210\u7acb\u3002\u53ea\u6709\u89c4\u5219\u800c\u4e0d\u72ec\u5360\u80fd\u529b&#xff0c;\u89c4\u5219\u53ef\u88ab\u7ed5\u8fc7&#xff08;\u8fdd\u53cd A10&#xff09;&#xff1b;\u53ea\u72ec\u5360\u80fd\u529b\u800c\u65e0\u89c4\u5219&#xff0c;\u5219\u80fd\u529b\u7684\u91ca\u653e\u7f3a\u4e4f\u5224\u636e&#xff0c;\u8fb9\u754c\u9000\u5316\u4e3a\u4e00\u4e2a\u5f00\u5173\u3002<\/p>\n<h4>4.2.2 \u516d\u9879\u6027\u8d28<\/h4>\n<p>\u5176\u4e00&#xff0c;\u8fb9\u754c\u4e0d\u662f\u914d\u7f6e\u3002 \u914d\u7f6e\u63cf\u8ff0\u7cfb\u7edf\u5982\u4f55\u5de5\u4f5c&#xff0c;\u8fb9\u754c\u63cf\u8ff0\u4ec0\u4e48\u4e0d\u80fd\u53d1\u751f\u3002\u4e8c\u8005\u7684\u533a\u522b\u4f53\u73b0\u5728\u53d8\u66f4\u8def\u5f84\u4e0a&#xff1a;\u914d\u7f6e\u7531\u8fd0\u8425\u6d41\u7a0b\u53d8\u66f4&#xff0c;\u8fb9\u754c\u7684\u56fa\u5b9a\u90e8\u5206\u4e0d\u5e94\u7ecf\u7531\u540c\u4e00\u8def\u5f84\u53d8\u66f4&#xff08;E2.4&#xff09;\u3002\u82e5\u8fb9\u754c\u4e0e\u914d\u7f6e\u5171\u7528\u53d8\u66f4\u901a\u9053&#xff0c;\u5219\u83b7\u5f97\u914d\u7f6e\u6743\u5373\u83b7\u5f97\u5173\u95ed\u8fb9\u754c\u7684\u80fd\u529b\u3002<\/p>\n<p>\u5176\u4e8c&#xff0c;\u8fb9\u754c\u63a7\u5236\u7684\u662f\u5019\u9009\u6267\u884c&#xff0c;\u4e0d\u662f\u610f\u56fe\u3002 \u8fb9\u754c\u7684\u8f93\u5165\u662f\u5df2\u5b8c\u5168\u5177\u5316\u7684 x&#xff0c;\u800c\u975e\u5176\u4e0a\u6e38\u63cf\u8ff0\u3002\u8fd9\u662f\u516c\u7406 A3 \u4e0e\u547d\u9898 P2.1 \u7684\u5171\u540c\u7ed3\u8bba&#xff1a;\u63a7\u5236\u70b9\u82e5\u4e0d\u8986\u76d6\u6700\u7ec8\u5bf9\u8c61&#xff0c;\u5219\u4e0d\u6784\u6210\u8fb9\u754c\u3002<\/p>\n<p>\u5176\u4e09&#xff0c;\u8fb9\u754c\u5fc5\u987b\u770b\u5230\u6700\u7ec8\u5bf9\u8c61\u53ca\u5176\u7ed1\u5b9a\u5173\u7cfb\u3002 \u4ec5\u5224\u65ad\u64cd\u4f5c\u7c7b\u578b\u4e0d\u8db3\u4ee5\u88c1\u51b3\u3002\u8fb9\u754c\u987b\u9a8c\u8bc1 x \u4e0e I\u3001P\u3001Approval\u3001Ev \u4e4b\u95f4\u7684\u5173\u7cfb\u662f\u5426\u6210\u7acb&#xff0c;\u4e14\u5bf9\u8c61\u53d8\u5316\u987b\u4f7f\u65e2\u6709\u8bc1\u660e\u5931\u6548&#xff08;A9&#xff09;\u3002<\/p>\n<p>\u5176\u56db&#xff0c;\u8fb9\u754c\u4e0d\u521b\u9020\u884c\u52a8\u3002 \u8fb9\u754c\u53ea\u5bf9\u5019\u9009\u6267\u884c\u4f5c\u51fa\u653e\u884c\u6216\u4e0d\u653e\u884c\u7684\u5224\u65ad&#xff0c;\u4e0d\u751f\u6210\u66ff\u4ee3\u65b9\u6848\u3001\u4e0d\u4fee\u6b63\u53c2\u6570\u3001\u4e0d\u8865\u5168\u7f3a\u5931\u5b57\u6bb5\u3002\u8865\u5168\u5c5e\u4e8e\u4e0a\u5c42\u804c\u8d23&#xff0c;\u8fb9\u754c\u6267\u884c\u8865\u5168\u5373\u610f\u5473\u7740\u5b83\u540c\u65f6\u662f\u751f\u6210\u65b9\u4e0e\u88c1\u51b3\u65b9&#xff0c;\u8fdd\u53cd A6\u3002<\/p>\n<p>\u5176\u4e94&#xff0c;\u8fb9\u754c\u662f\u5355\u5411\u95e8\u3002 \u901a\u8fc7\u8fb9\u754c\u7684\u65b9\u5411\u53ea\u6709\u4e00\u4e2a&#xff1a;\u4ece\u5019\u9009\u6267\u884c\u5230\u73b0\u5b9e\u3002\u4e0d\u5b58\u5728&#034;\u5148\u6267\u884c\u540e\u8865\u8bc1\u660e&#034;\u7684\u53cd\u5411\u8def\u5f84&#xff0c;\u4e5f\u4e0d\u5b58\u5728\u5728\u62d2\u7edd\u540e\u7531\u4e0a\u5c42\u91cd\u8bd5\u6d88\u89e3\u62d2\u7edd\u7684\u673a\u5236\u3002<\/p>\n<p>\u56fe 4-1\u3000\u8fb9\u754c\u7684\u5355\u5411\u6027<\/p>\n<p>  #mermaid-svg-jthjZj105hefzzz3{font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;font-size:16px;fill:#333;}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#mermaid-svg-jthjZj105hefzzz3 .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#mermaid-svg-jthjZj105hefzzz3 .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#mermaid-svg-jthjZj105hefzzz3 .error-icon{fill:#552222;}#mermaid-svg-jthjZj105hefzzz3 .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-jthjZj105hefzzz3 .edge-thickness-normal{stroke-width:1px;}#mermaid-svg-jthjZj105hefzzz3 .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-jthjZj105hefzzz3 .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-jthjZj105hefzzz3 .edge-thickness-invisible{stroke-width:0;fill:none;}#mermaid-svg-jthjZj105hefzzz3 .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-jthjZj105hefzzz3 .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-jthjZj105hefzzz3 .marker{fill:#333333;stroke:#333333;}#mermaid-svg-jthjZj105hefzzz3 .marker.cross{stroke:#333333;}#mermaid-svg-jthjZj105hefzzz3 svg{font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-jthjZj105hefzzz3 p{margin:0;}#mermaid-svg-jthjZj105hefzzz3 .label{font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;color:#333;}#mermaid-svg-jthjZj105hefzzz3 .cluster-label text{fill:#333;}#mermaid-svg-jthjZj105hefzzz3 .cluster-label span{color:#333;}#mermaid-svg-jthjZj105hefzzz3 .cluster-label span p{background-color:transparent;}#mermaid-svg-jthjZj105hefzzz3 .label text,#mermaid-svg-jthjZj105hefzzz3 span{fill:#333;color:#333;}#mermaid-svg-jthjZj105hefzzz3 .node rect,#mermaid-svg-jthjZj105hefzzz3 .node circle,#mermaid-svg-jthjZj105hefzzz3 .node ellipse,#mermaid-svg-jthjZj105hefzzz3 .node polygon,#mermaid-svg-jthjZj105hefzzz3 .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-svg-jthjZj105hefzzz3 .rough-node .label text,#mermaid-svg-jthjZj105hefzzz3 .node .label text,#mermaid-svg-jthjZj105hefzzz3 .image-shape .label,#mermaid-svg-jthjZj105hefzzz3 .icon-shape .label{text-anchor:middle;}#mermaid-svg-jthjZj105hefzzz3 .node .katex path{fill:#000;stroke:#000;stroke-width:1px;}#mermaid-svg-jthjZj105hefzzz3 .rough-node .label,#mermaid-svg-jthjZj105hefzzz3 .node .label,#mermaid-svg-jthjZj105hefzzz3 .image-shape .label,#mermaid-svg-jthjZj105hefzzz3 .icon-shape .label{text-align:center;}#mermaid-svg-jthjZj105hefzzz3 .node.clickable{cursor:pointer;}#mermaid-svg-jthjZj105hefzzz3 .root .anchor path{fill:#333333!important;stroke-width:0;stroke:#333333;}#mermaid-svg-jthjZj105hefzzz3 .arrowheadPath{fill:#333333;}#mermaid-svg-jthjZj105hefzzz3 .edgePath .path{stroke:#333333;stroke-width:2.0px;}#mermaid-svg-jthjZj105hefzzz3 .flowchart-link{stroke:#333333;fill:none;}#mermaid-svg-jthjZj105hefzzz3 .edgeLabel{background-color:rgba(232,232,232, 0.8);text-align:center;}#mermaid-svg-jthjZj105hefzzz3 .edgeLabel p{background-color:rgba(232,232,232, 0.8);}#mermaid-svg-jthjZj105hefzzz3 .edgeLabel rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#mermaid-svg-jthjZj105hefzzz3 .labelBkg{background-color:rgba(232, 232, 232, 0.5);}#mermaid-svg-jthjZj105hefzzz3 .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#mermaid-svg-jthjZj105hefzzz3 .cluster text{fill:#333;}#mermaid-svg-jthjZj105hefzzz3 .cluster span{color:#333;}#mermaid-svg-jthjZj105hefzzz3 div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#mermaid-svg-jthjZj105hefzzz3 .flowchartTitleText{text-anchor:middle;font-size:18px;fill:#333;}#mermaid-svg-jthjZj105hefzzz3 rect.text{fill:none;stroke-width:0;}#mermaid-svg-jthjZj105hefzzz3 .icon-shape,#mermaid-svg-jthjZj105hefzzz3 .image-shape{background-color:rgba(232,232,232, 0.8);text-align:center;}#mermaid-svg-jthjZj105hefzzz3 .icon-shape p,#mermaid-svg-jthjZj105hefzzz3 .image-shape p{background-color:rgba(232,232,232, 0.8);padding:2px;}#mermaid-svg-jthjZj105hefzzz3 .icon-shape .label rect,#mermaid-svg-jthjZj105hefzzz3 .image-shape .label rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#mermaid-svg-jthjZj105hefzzz3 .label-icon{display:inline-block;height:1em;overflow:visible;vertical-align:-0.125em;}#mermaid-svg-jthjZj105hefzzz3 .node .label-icon path{fill:currentColor;stroke:revert;stroke-width:revert;}#mermaid-svg-jthjZj105hefzzz3 :root{&#8211;mermaid-font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;} <\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>\u63d0\u4ea4<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>d &#061; ALLOW&#xff0c;\u91ca\u653e cap<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>d \u2260 ALLOW<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>\u8865\u5145\u8bc1\u636e\u540e\u91cd\u65b0\u63d0\u4ea4&#xff0c;\u91cd\u65b0\u88c1\u51b3<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>\u4e0d\u5b58\u5728\u6b64\u65b9\u5411<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u4e0a\u5c42&#xff1a;\u751f\u6210 x\u3001\u6536\u96c6 Ev<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u6267\u884c\u8fb9\u754c\u89c4\u5219 &#043; cap \u72ec\u5360<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u73b0\u5b9e\u52a8\u4f5c<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u8fd4\u56de \u03c0 \u4e0e\u5931\u8d25\u8bed\u4e49<\/p>\n<p><\/span> <\/p>\n<p>\u56fe\u4e2d\u865a\u7ebf\u6807\u8bb0\u7684\u53cd\u5411\u8def\u5f84\u4e0d\u5b58\u5728&#xff1a;\u73b0\u5b9e\u52a8\u4f5c\u4e00\u65e6\u53d1\u751f&#xff0c;\u8fb9\u754c\u4e0d\u518d\u5177\u5907\u63a7\u5236\u529b\u3002\u8fd9\u51b3\u5b9a\u4e86\u8fb9\u754c\u5fc5\u987b\u4f4d\u4e8e\u52a8\u4f5c\u4e4b\u524d\u800c\u975e\u4e4b\u540e&#xff0c;\u4e5f\u51b3\u5b9a\u4e86\u5ba1\u8ba1\u4e0d\u80fd\u66ff\u4ee3\u8fb9\u754c&#xff08;\u8868 2-1&#xff09;\u3002<\/p>\n<p>\u5176\u516d&#xff0c;\u89c4\u5219\u7ec4\u5408&#xff0c;\u4e0d\u4e92\u76f8\u8986\u76d6\u3002 \u590d\u6742\u7cfb\u7edf\u9700\u8981\u591a\u7c7b\u89c4\u5219&#xff1a;\u91d1\u989d\u9650\u5236\u3001\u65f6\u95f4\u7a97\u53e3\u3001\u8bbe\u5907\u72b6\u6001\u3001\u5ba1\u6279\u6570\u91cf\u3001\u89d2\u8272\u72ec\u7acb\u6027\u3001\u5730\u7406\u7ea6\u675f\u3001\u98ce\u9669\u7ea6\u675f\u3001\u5bf9\u8c61\u7ed1\u5b9a\u3001\u56fa\u5b9a\u786c\u9650\u5236\u3002\u8fd9\u4e9b\u89c4\u5219\u6765\u81ea\u4e0d\u540c\u5c42\u7ea7&#xff0c;\u5176\u7ec4\u5408\u65b9\u5f0f\u5fc5\u987b\u88ab\u660e\u786e\u5b9a\u4e49\u3002<\/p>\n<p>\u5173\u952e\u7ea6\u675f\u662f&#xff1a;\u540e\u5199\u7684\u4e1a\u52a1\u89c4\u5219\u4e0d\u5f97\u8986\u76d6\u56fa\u5b9a\u5e95\u7ebf\u3002\u82e5\u5bbf\u4e3b\u7cfb\u7edf\u89c4\u5b9a&#034;\u8bbe\u5907\u72b6\u6001\u672a\u77e5\u65f6\u4e0d\u5f97 ALLOW&#034;&#xff0c;\u5219\u4efb\u4f55\u4e1a\u52a1\u89c4\u5219\u4e0d\u5f97\u5199\u6210&#034;\u91d1\u989d\u8f83\u5c0f\u65f6&#xff0c;\u8bbe\u5907\u72b6\u6001\u672a\u77e5\u4e5f\u53ef\u7ee7\u7eed&#034;\u3002\u5141\u8bb8\u6b64\u7c7b\u8986\u76d6&#xff0c;\u7b49\u4e8e\u628a\u7b56\u7565\u8bed\u8a00\u53d8\u6210\u5173\u95ed\u8fb9\u754c\u7684\u5de5\u5177\u3002<\/p>\n<p>\u547d\u9898 P4.2&#xff08;\u7ec4\u5408\u5f8b&#xff09; EBL \u89c4\u5219\u7684\u7ec4\u5408\u8fd0\u7b97\u4e3a\u5408\u53d6\u3002\u4efb\u610f\u89c4\u5219\u96c6\u5408 R \u7684\u653e\u884c\u96c6\u6ee1\u8db3 ALLOW(R \u222a {r}) \u2286 ALLOW(R)\u2014\u2014\u6dfb\u52a0\u89c4\u5219\u53ea\u80fd\u6536\u7f29\u653e\u884c\u8303\u56f4&#xff0c;\u4e0d\u80fd\u6269\u5927\u3002\u8be5\u6027\u8d28\u662f\u516c\u7406 A4 \u5355\u8c03\u6536\u7f29\u6027\u5728\u8bed\u8a00\u5c42\u7684\u8868\u8fbe\u3002<\/p>\n<p>P4.2 \u7684\u5b9e\u73b0\u542b\u4e49\u662f&#xff1a;EBL \u4e0d\u63d0\u4f9b&#034;\u4f8b\u5916&#034;\u300c\u4f18\u5148\u7ea7\u8986\u76d6\u300d\u6216\u300c\u540e\u89c4\u5219\u80dc\u51fa\u300d\u7b49\u8bed\u4e49\u3002\u9700\u8981\u653e\u5bbd\u65f6&#xff0c;\u6b63\u786e\u505a\u6cd5\u662f\u4fee\u6539\u88ab\u8fdd\u53cd\u7684\u90a3\u6761\u89c4\u5219\u672c\u8eab\u5e76\u7559\u4e0b\u53d8\u66f4\u8bb0\u5f55&#xff0c;\u800c\u975e\u53e0\u52a0\u4e00\u6761\u66f4\u5bbd\u677e\u7684\u89c4\u5219\u3002\u8fd9\u4e00\u8bbe\u8ba1\u4f7f\u89c4\u5219\u96c6\u7684\u5b9e\u9645\u6548\u529b\u53ef\u7531\u9759\u6001\u5206\u6790\u786e\u5b9a&#xff0c;\u800c\u65e0\u9700\u6a21\u62df\u6c42\u503c\u987a\u5e8f\u3002<\/p>\n<p>\u7531\u6027\u8d28\u516d\u76f4\u63a5\u5f15\u51fa\u4e00\u4e2a\u95ee\u9898&#xff1a;\u65e2\u7136\u89c4\u5219\u53ea\u80fd\u6536\u7f29&#xff0c;\u90a3\u4e48\u4ec0\u4e48\u89c4\u5219\u4e0d\u53ef\u88ab\u4efb\u4f55\u540e\u7eed\u89c4\u5219\u6536\u7f29\u5230\u5931\u6548&#xff0c;\u53c8\u7531\u8c01\u89c4\u5b9a&#xff1f;\u8fd9\u662f\u5baa\u6cd5\u7684\u804c\u8d23\u3002<\/p>\n<hr \/>\n<h3>4.3 Constitution<\/h3>\n<h4>4.3.1 \u4e3a\u4ec0\u4e48\u8fb9\u754c\u8bed\u8a00\u9700\u8981\u5baa\u6cd5<\/h4>\n<p>P \u4e0e K \u7684\u533a\u5206\u5728\u516c\u7406 A4 \u4e2d\u5df2\u7ecf\u786e\u7acb&#xff0c;\u672c\u8282\u8bf4\u660e\u5176\u5728\u8bed\u8a00\u5c42\u7684\u5b9e\u73b0\u65b9\u5f0f\u3002<\/p>\n<p>\u82e5\u4e00\u95e8\u7b56\u7565\u8bed\u8a00\u4e0d\u533a\u5206\u4e8c\u8005&#xff0c;\u5219\u8bed\u8a00\u7684\u5168\u90e8\u8868\u8fbe\u80fd\u529b\u90fd\u53ef\u7528\u4e8e\u4fee\u6539\u4efb\u610f\u89c4\u5219&#xff0c;\u5305\u62ec\u90a3\u4e9b\u7528\u4e8e\u7ea6\u675f\u4fee\u6539\u884c\u4e3a\u672c\u8eab\u7684\u89c4\u5219\u3002\u6b64\u65f6\u5b89\u5168\u6027\u7b49\u4ef7\u4e8e\u914d\u7f6e\u6b63\u786e\u6027&#xff0c;\u800c\u914d\u7f6e\u6b63\u786e\u6027\u4f9d\u8d56\u4e8e\u6bcf\u4e00\u6b21\u53d8\u66f4\u90fd\u4e0d\u51fa\u9519\u2014\u2014\u8fd9\u662f\u4e00\u4e2a\u4e0d\u53ef\u9a8c\u8bc1\u7684\u524d\u63d0\u3002\u7ba1\u7406\u5458\u6743\u9650\u3001\u914d\u7f6e\u7cfb\u7edf\u6f0f\u6d1e\u3001\u4f9b\u5e94\u94fe\u6c61\u67d3\u4e2d\u7684\u4efb\u4f55\u4e00\u9879&#xff0c;\u90fd\u8db3\u4ee5\u4f7f\u5176\u5931\u6548\u3002<\/p>\n<p>\u5b9a\u4e49 D4.3.1&#xff08;\u5baa\u6cd5 \/ Constitution K&#xff09; \u5728 EBL \u4e2d\u5177\u6709\u7279\u6b8a\u5730\u4f4d\u7684\u89c4\u5219\u96c6\u5408&#xff0c;\u6ee1\u8db3&#xff1a;\u4e0d\u53ef\u7531 P \u5c42\u89c4\u5219\u5173\u95ed\u3001\u524a\u5f31\u6216\u65c1\u8def&#xff1b;\u5176\u53d8\u66f4\u987b\u7ecf\u7531\u4e0e\u5e38\u89c4\u7b56\u7565\u4e0d\u540c\u7684\u8def\u5f84&#xff1b;\u4e14\u5176\u5185\u5bb9\u540c\u65f6\u5b9a\u4e49 EBL \u7684\u8bed\u8a00\u80fd\u529b\u8fb9\u754c\u3002<\/p>\n<h4>4.3.2 \u5baa\u6cd5\u7684\u5341\u6761\u539f\u5219<\/h4>\n<p>\u4e00\u4efd\u5b8c\u6574\u5baa\u6cd5\u987b\u7ecf\u957f\u671f\u8bbe\u8ba1\u4e0e\u5f62\u5f0f\u5316\u9a8c\u8bc1\u3002\u4ee5\u4e0b\u5341\u6761\u7531\u7b2c 1 \u81f3\u7b2c 3 \u7ae0\u7684\u7ed3\u8bba\u76f4\u63a5\u63a8\u51fa&#xff0c;\u6784\u6210\u6700\u5c0f\u96c6\u5408\u3002<\/p>\n<p>\u8868 4-2\u3000EBL \u5baa\u6cd5\u6761\u6b3e\u53ca\u5176\u516c\u7406\u4f9d\u636e<\/p>\n<table>\n<tr>\u7f16\u53f7\u6761\u6b3e\u4f9d\u636e<\/tr>\n<tbody>\n<tr>\n<td>C1<\/td>\n<td>EBL \u9762\u5411\u73b0\u5b9e\u6267\u884c\u88c1\u51b3&#xff0c;\u975e\u901a\u7528\u8ba1\u7b97&#xff1b;\u4efb\u4f55\u8bed\u8a00\u80fd\u529b\u987b\u670d\u52a1\u4e8e\u8fb9\u754c\u5224\u65ad<\/td>\n<td>P4.1<\/td>\n<\/tr>\n<tr>\n<td>C2<\/td>\n<td>Runtime \u53ea\u88c1\u51b3&#xff0c;\u4e0d\u6267\u884c\u5916\u90e8\u52a8\u4f5c&#xff1a;\u88c1\u51b3\u8fc7\u7a0b\u4e2d\u4e0d\u5f97\u8c03\u7528\u5916\u90e8\u63a5\u53e3\u3001\u4fee\u6539\u6570\u636e\u3001\u53d1\u9001\u4ea4\u6613\u6216\u63a7\u5236\u8bbe\u5907<\/td>\n<td>A6<\/td>\n<\/tr>\n<tr>\n<td>C3<\/td>\n<td>\u76f8\u540c\u89c4\u5219\u4e0e\u76f8\u540c\u8f93\u5165\u4ea7\u751f\u76f8\u540c (d, \u03c0)&#xff1b;\u4e0d\u5f97\u4f9d\u8d56\u968f\u673a\u91c7\u6837\u3001\u9690\u5f0f\u7f51\u7edc\u72b6\u6001\u3001\u672a\u58f0\u660e\u73af\u5883\u53d8\u91cf\u6216\u6a21\u578b\u4e34\u573a\u89e3\u91ca<\/td>\n<td>\u0393 \u786e\u5b9a\u6027<\/td>\n<\/tr>\n<tr>\n<td>C4<\/td>\n<td>UNKNOWN\u3001MISSING\u3001EXPIRED\u3001CONFLICT \u4f5c\u4e3a\u4e00\u7b49\u8bed\u4e49\u4fdd\u7559&#xff0c;\u4e0d\u5f97\u81ea\u52a8\u8f6c\u4e3a\u771f&#xff0c;\u4e0d\u5f97\u7531\u9ed8\u8ba4\u503c\u6d88\u89e3<\/td>\n<td>A8\u3001P3.3<\/td>\n<\/tr>\n<tr>\n<td>C5<\/td>\n<td>ALLOW \u987b\u7531\u5b8c\u6574\u8bc1\u660e\u4ea7\u751f&#xff1b;\u03c0 \u987b\u80fd\u6307\u51fa\u6210\u7acb\u7684\u89c4\u5219\u3001\u4f7f\u7528\u7684\u8bc1\u636e\u3001\u7ed1\u5b9a\u5173\u7cfb\u3001\u88ab\u6ee1\u8db3\u7684\u56fa\u5b9a\u7ea6\u675f\u3001\u7b56\u7565\u7248\u672c\u4e0e\u6c42\u503c\u8def\u5f84<\/td>\n<td>A8<\/td>\n<\/tr>\n<tr>\n<td>C6<\/td>\n<td>\u6700\u7ec8\u6267\u884c\u5bf9\u8c61\u987b\u4e0e\u610f\u56fe\u3001\u7b56\u7565\u3001\u5ba1\u6279\u3001\u8bc1\u636e\u7ed1\u5b9a&#xff1b;\u5bf9\u8c61\u53d8\u5316\u4f7f\u65e2\u6709\u8bc1\u660e\u5931\u6548<\/td>\n<td>A2\u3001A3\u3001A9<\/td>\n<\/tr>\n<tr>\n<td>C7<\/td>\n<td>\u5173\u7cfb\u72ec\u7acb\u6027\u662f\u4e00\u7b49\u8bed\u4e49&#xff0c;\u4e0d\u5f97\u4ec5\u7531\u6570\u91cf\u63a8\u65ad\u72ec\u7acb\u6027<\/td>\n<td>A7\u3001P2.5<\/td>\n<\/tr>\n<tr>\n<td>C8<\/td>\n<td>Evidence \u662f\u4e00\u7b49\u8f93\u5165&#xff0c;\u987b\u643a\u5e26\u6765\u6e90\u3001\u5bf9\u8c61\u3001\u65f6\u95f4\u3001\u6709\u6548\u6027\u3001\u5b8c\u6574\u6027\u4e0e\u5173\u8054\u5173\u7cfb&#xff1b;Runtime \u4f9d\u636e\u8bc1\u636e\u800c\u975e\u4e0a\u5c42\u58f0\u660e\u88c1\u51b3<\/td>\n<td>A7<\/td>\n<\/tr>\n<tr>\n<td>C9<\/td>\n<td>\u7b56\u7565\u65e0\u526f\u4f5c\u7528\u3001\u5fc5\u7136\u7ec8\u6b62\u3001\u8d44\u6e90\u53ef\u8ba1\u7b97&#xff1b;Runtime \u987b\u80fd\u9650\u5236\u6700\u5927\u6b65\u9aa4\u3001\u5185\u5b58\u3001\u5d4c\u5957\u6df1\u5ea6\u3001\u8bc1\u636e\u6570\u91cf\u4e0e\u89c4\u5219\u590d\u6742\u5ea6<\/td>\n<td>\u8981\u6c42 2\u30013<\/td>\n<\/tr>\n<tr>\n<td>C10<\/td>\n<td>\u53ef\u7f16\u7a0b\u89c4\u5219\u4e0d\u5f97\u964d\u4f4e\u5baa\u6cd5\u89c4\u5b9a\u7684\u6700\u4f4e\u8981\u6c42&#xff1b;P \u53ef\u589e\u52a0\u7ea6\u675f\u3001\u7f29\u5c0f\u8303\u56f4\u3001\u8981\u6c42\u66f4\u591a\u8bc1\u636e&#xff0c;\u4e0d\u53ef\u53cd\u5411<\/td>\n<td>A4\u3001P4.2<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u5341\u6761\u4e2d&#xff0c;C1 \u81f3 C3 \u7ea6\u675f\u8bed\u8a00\u4e0e\u8fd0\u884c\u65f6\u7684\u5f62\u6001&#xff0c;C4 \u81f3 C8 \u7ea6\u675f\u5224\u5b9a\u7684\u8bed\u4e49&#xff0c;C9 \u7ea6\u675f\u8d44\u6e90\u884c\u4e3a&#xff0c;C10 \u7ea6\u675f\u4e8c\u8005\u7684\u5173\u7cfb\u3002C10 \u662f\u4f7f\u524d\u4e5d\u6761\u6210\u7acb\u7684\u5143\u6761\u6b3e\u2014\u2014\u6ca1\u6709 C10&#xff0c;\u5176\u4f59\u4e5d\u6761\u5747\u53ef\u88ab\u4e00\u6761\u4e1a\u52a1\u89c4\u5219\u5173\u95ed\u3002<\/p>\n<h4>4.3.3 \u5baa\u6cd5\u5148\u4e8e\u8bed\u6cd5<\/h4>\n<p>\u901a\u7528\u8bed\u8a00\u7684\u8bbe\u8ba1\u987a\u5e8f\u901a\u5e38\u662f\u5148\u5b9a\u4e49\u8bed\u6cd5\u4e0e\u8bed\u4e49&#xff0c;\u518d\u8ba8\u8bba\u5b89\u5168\u9650\u5236&#xff0c;\u9650\u5236\u4ee5\u9759\u6001\u68c0\u67e5\u6216\u8fd0\u884c\u65f6\u6c99\u7bb1\u7684\u5f62\u5f0f\u9644\u52a0\u4e8e\u8bed\u8a00\u4e4b\u4e0a\u3002EBL \u91c7\u7528\u76f8\u53cd\u987a\u5e8f&#xff1a;\u5148\u786e\u5b9a\u5baa\u6cd5&#xff0c;\u518d\u7531\u5baa\u6cd5\u51b3\u5b9a\u8bed\u8a00\u53ef\u4ee5\u5177\u5907\u54ea\u4e9b\u6784\u9020\u3002<\/p>\n<p>\u8be5\u987a\u5e8f\u7684\u540e\u679c\u662f\u5177\u4f53\u7684\u3002\u56e0 C9 \u8981\u6c42\u5fc5\u7136\u7ec8\u6b62&#xff0c;\u8bed\u8a00\u4e0d\u63d0\u4f9b\u65e0\u754c\u5faa\u73af\u4e0e\u4efb\u610f\u9012\u5f52&#xff0c;\u53ea\u63d0\u4f9b\u5bf9\u5df2\u58f0\u660e\u96c6\u5408\u7684\u6709\u754c\u904d\u5386&#xff1b;\u56e0 C2 \u8981\u6c42\u65e0\u526f\u4f5c\u7528&#xff0c;\u8bed\u8a00\u4e0d\u63d0\u4f9b\u5916\u90e8\u8c03\u7528\u6784\u9020&#xff1b;\u56e0 C3 \u8981\u6c42\u786e\u5b9a\u6027&#xff0c;\u8bed\u8a00\u4e0d\u63d0\u4f9b\u968f\u673a\u6570\u3001\u5f53\u524d\u65f6\u95f4\u7684\u9690\u5f0f\u8bfb\u53d6&#xff08;\u65f6\u95f4\u987b\u4f5c\u4e3a\u663e\u5f0f\u8f93\u5165 t&#xff09;\u4e0e\u672a\u58f0\u660e\u53d8\u91cf\u8bbf\u95ee&#xff1b;\u56e0 C4 \u8981\u6c42\u56db\u6001\u4fdd\u7559&#xff0c;\u8bed\u8a00\u7684\u6761\u4ef6\u6c42\u503c\u4e0d\u8fd4\u56de\u5e03\u5c14\u503c&#xff0c;\u800c\u8fd4\u56de\u5e26\u72b6\u6001\u7684\u4e09\u503c\u6216\u591a\u503c\u7ed3\u679c&#xff1b;\u56e0 C10 \u8981\u6c42\u4e0d\u53ef\u8986\u76d6&#xff0c;\u8bed\u8a00\u4e0d\u63d0\u4f9b\u89c4\u5219\u4f18\u5148\u7ea7\u4e0e\u4f8b\u5916\u8bed\u6cd5\u3002<\/p>\n<p>\u7531\u6b64&#xff0c;&#034;\u8be5\u8bed\u8a00\u4e0d\u80fd\u505a\u67d0\u4e8b&#034;\u4e0d\u662f\u5b9e\u73b0\u5c42\u9762\u7684\u9650\u5236&#xff0c;\u800c\u662f\u8bed\u6cd5\u5c42\u9762\u4e0d\u5b58\u5728\u5bf9\u5e94\u6784\u9020\u3002\u8fd9\u4e00\u533a\u522b\u5728\u5b89\u5168\u4e0a\u662f\u5b9e\u8d28\u6027\u7684&#xff1a;\u9759\u6001\u68c0\u67e5\u53ef\u88ab\u7ed5\u8fc7\u6216\u914d\u7f6e\u653e\u5bbd&#xff0c;\u4e0d\u5b58\u5728\u7684\u8bed\u6cd5\u6784\u9020\u4e0d\u80fd\u88ab\u4f7f\u7528\u3002<\/p>\n<h4>4.3.4 \u5baa\u6cd5\u662f Runtime \u7684\u9a8c\u8bc1\u6807\u51c6<\/h4>\n<p>\u5baa\u6cd5\u7684\u7b2c\u4e8c\u91cd\u8eab\u4efd\u662f Runtime \u5b9e\u73b0\u7684\u4e00\u81f4\u6027\u89c4\u8303\u3002\u591a\u4e2a Runtime \u5b9e\u73b0&#xff08;\u4e0d\u540c\u786c\u4ef6\u5e73\u53f0\u3001\u4e0d\u540c\u8bed\u8a00\u3001\u4e0d\u540c\u5382\u5546&#xff09;\u987b\u5bf9\u540c\u4e00\u89c4\u5219\u4e0e\u540c\u4e00\u8f93\u5165\u4ea7\u751f\u540c\u4e00\u7ed3\u8bba&#xff0c;\u5426\u5219\u89c4\u5219\u7684\u8bed\u4e49\u968f\u90e8\u7f72\u73af\u5883\u6f02\u79fb&#xff0c;\u8de8\u7cfb\u7edf\u7684\u5b89\u5168\u547d\u9898\u4e0d\u518d\u6210\u7acb\u3002<\/p>\n<p>\u56e0\u6b64\u5baa\u6cd5\u987b\u914d\u5957\u4e00\u7ec4\u4e00\u81f4\u6027\u6d4b\u8bd5&#xff1a;\u5bf9\u6bcf\u4e00\u6761 C \u6b3e&#xff0c;\u7ed9\u51fa\u53ef\u6267\u884c\u7684\u68c0\u9a8c\u7528\u4f8b\u2014\u2014\u4f8b\u5982\u9488\u5bf9 C4&#xff0c;\u6784\u9020\u4e00\u4efd EXPIRED \u8bc1\u636e\u5e76\u9a8c\u8bc1\u4efb\u4f55\u5b9e\u73b0\u5747\u4e0d\u4ea7\u751f ALLOW&#xff1b;\u9488\u5bf9 C10&#xff0c;\u6784\u9020\u4e00\u6761\u8bd5\u56fe\u653e\u5bbd\u56fa\u5b9a\u9650\u5236\u7684\u4e1a\u52a1\u89c4\u5219\u5e76\u9a8c\u8bc1\u5176\u88ab\u62d2\u7edd\u52a0\u8f7d\u800c\u975e\u88ab\u9759\u9ed8\u5ffd\u7565\u3002<\/p>\n<p>\u3014\u8865\u3015\u5173\u4e8e\u62d2\u7edd\u52a0\u8f7d\u4e0e\u9759\u9ed8\u5ffd\u7565\u7684\u533a\u522b\u3002 C10 \u7684\u5b9e\u73b0\u6709\u4e24\u79cd\u53ef\u80fd&#xff1a;\u4e00\u662f\u52a0\u8f7d\u9636\u6bb5\u62d2\u7edd\u8fdd\u89c4\u89c4\u5219\u5e76\u62a5\u9519&#xff0c;\u4e8c\u662f\u8fd0\u884c\u9636\u6bb5\u5ffd\u7565\u5176\u653e\u5bbd\u6548\u679c\u3002\u4e8c\u8005\u5728\u653e\u884c\u7ed3\u679c\u4e0a\u7b49\u4ef7&#xff0c;\u5728\u8fd0\u7ef4\u540e\u679c\u4e0a\u4e0d\u7b49\u4ef7\u2014\u2014\u9759\u9ed8\u5ffd\u7565\u4f1a\u4f7f\u89c4\u5219\u4f5c\u8005\u76f8\u4fe1\u89c4\u5219\u5df2\u751f\u6548&#xff0c;\u4ece\u800c\u5728\u5176\u4ed6\u73af\u8282\u636e\u6b64\u4f5c\u51fa\u9519\u8bef\u5047\u8bbe\u3002\u672c\u4e66\u4e3b\u5f20\u524d\u8005&#xff1a;\u8fdd\u53cd\u5baa\u6cd5\u7684\u89c4\u5219\u4e0d\u5e94\u88ab\u90e8\u7f72&#xff0c;\u800c\u975e\u88ab\u90e8\u7f72\u540e\u4e0d\u8d77\u4f5c\u7528\u3002<\/p>\n<hr \/>\n<h3>4.4 Runtime<\/h3>\n<p>\u9898\u8bb0&#xff1a;Runtime \u4e0d\u521b\u9020\u4fe1\u4efb&#xff0c;\u5b83\u53ea\u9a8c\u8bc1\u8bc1\u660e\u3002<\/p>\n<h4>4.4.1 \u88c1\u51b3\u4e0e\u6267\u884c\u7684\u5206\u79bb<\/h4>\n<p>Runtime \u662f\u5224\u5b9a\u51fd\u6570 \u0393 \u7684\u5b9e\u73b0\u3002\u5176\u9996\u8981\u67b6\u6784\u6027\u8d28\u662f&#xff1a;Runtime \u88c1\u51b3&#xff0c;\u4f46\u4e0d\u6267\u884c\u3002<\/p>\n<p>\u5206\u79bb\u7684\u7406\u7531\u7531\u516c\u7406 A6 \u7ed9\u51fa&#xff0c;\u4f46\u5728 Runtime \u8fd9\u4e00\u5c42\u6709\u66f4\u5177\u4f53\u7684\u542b\u4e49\u3002\u82e5\u540c\u4e00\u7ec4\u4ef6\u65e2\u6c42\u503c\u89c4\u5219\u53c8\u53d1\u8d77\u52a8\u4f5c&#xff0c;\u5219\u8be5\u7ec4\u4ef6\u7684\u4efb\u4f55\u7f3a\u9677\u2014\u2014\u903b\u8f91\u9519\u8bef\u3001\u5185\u5b58\u7834\u574f\u3001\u88ab\u6ce8\u5165\u7684\u63a7\u5236\u6d41\u2014\u2014\u90fd\u53ef\u80fd\u5728\u7ed5\u8fc7\u6c42\u503c\u7684\u60c5\u51b5\u4e0b\u76f4\u63a5\u89e6\u53d1\u52a8\u4f5c\u3002\u5206\u79bb\u4e4b\u540e&#xff0c;\u5373\u4f7f Runtime \u88ab\u5b8c\u5168\u653b\u9677&#xff0c;\u5176\u53ef\u9020\u6210\u7684\u6700\u5927\u635f\u5bb3\u662f\u8f93\u51fa\u4e00\u4e2a\u9519\u8bef\u7684 d &#061; ALLOW&#xff1b;\u800c\u8be5\u8f93\u51fa\u4ecd\u987b\u7ecf\u7531\u6301\u6709 cap \u7684\u8fb9\u754c\u6267\u884c&#xff0c;\u8fb9\u754c\u53ef\u5bf9\u5176\u65bd\u52a0\u72ec\u7acb\u7684\u56fa\u5b9a\u9650\u5236&#xff08;\u5baa\u6cd5 C2 \u4e0e A10 \u7684\u7ec4\u5408&#xff09;\u3002<\/p>\n<p>\u8fd9\u4e00\u7ed3\u6784\u53ef\u6982\u62ec\u4e3a\u804c\u8d23\u7684\u53cc\u91cd\u9650\u5b9a&#xff1a;Runtime \u662f\u88c1\u5224&#xff0c;\u4e0d\u662f\u8fd0\u52a8\u5458\u2014\u2014\u5b83\u4e0d\u53c2\u4e0e\u751f\u6210\u5019\u9009\u6267\u884c&#xff0c;\u4e0d\u4fee\u6b63\u53c2\u6570&#xff0c;\u4e0d\u8865\u5168\u7f3a\u5931\u5b57\u6bb5&#xff0c;\u4e0d\u5728\u88c1\u51b3\u8fc7\u7a0b\u4e2d\u6539\u53d8\u4e16\u754c\u72b6\u6001\u3002<\/p>\n<h4>4.4.2 \u8f93\u5165\u5c01\u95ed<\/h4>\n<p>\u0393 \u7684\u5c01\u95ed\u6027\u8981\u6c42 Runtime \u53ea\u8bfb\u53d6\u53c2\u6570\u4e2d\u663e\u5f0f\u58f0\u660e\u7684\u8f93\u5165\u3002\u8fdd\u53cd\u8be5\u6027\u8d28\u7684\u5e38\u89c1\u5f62\u5f0f\u5305\u62ec&#xff1a;\u8bfb\u53d6\u5f53\u524d\u7cfb\u7edf\u65f6\u95f4\u800c\u975e\u63a5\u6536 t \u4f5c\u4e3a\u8f93\u5165&#xff1b;\u5728\u6c42\u503c\u4e2d\u67e5\u8be2\u5916\u90e8\u670d\u52a1\u83b7\u53d6&#034;\u6700\u65b0\u72b6\u6001&#034;&#xff1b;\u8bbf\u95ee\u672a\u5728\u89c4\u5219\u4e2d\u58f0\u660e\u7684\u4e0a\u4e0b\u6587\u5b57\u6bb5&#xff1b;\u4f9d\u8d56\u8fdb\u7a0b\u5185\u7684\u7f13\u5b58\u6216\u5386\u53f2\u88c1\u51b3\u7ed3\u679c\u3002<\/p>\n<p>\u56fe 4-2\u3000Runtime \u7684\u8f93\u5165\u5c01\u95ed\u4e0e\u8f93\u51fa\u7ed3\u6784<\/p>\n<p>  #mermaid-svg-Sysg9SGLwvfJd4eN{font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;font-size:16px;fill:#333;}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#mermaid-svg-Sysg9SGLwvfJd4eN .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#mermaid-svg-Sysg9SGLwvfJd4eN .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#mermaid-svg-Sysg9SGLwvfJd4eN .error-icon{fill:#552222;}#mermaid-svg-Sysg9SGLwvfJd4eN .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-Sysg9SGLwvfJd4eN .edge-thickness-normal{stroke-width:1px;}#mermaid-svg-Sysg9SGLwvfJd4eN .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-Sysg9SGLwvfJd4eN .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-Sysg9SGLwvfJd4eN .edge-thickness-invisible{stroke-width:0;fill:none;}#mermaid-svg-Sysg9SGLwvfJd4eN .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-Sysg9SGLwvfJd4eN .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-Sysg9SGLwvfJd4eN .marker{fill:#333333;stroke:#333333;}#mermaid-svg-Sysg9SGLwvfJd4eN .marker.cross{stroke:#333333;}#mermaid-svg-Sysg9SGLwvfJd4eN svg{font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-Sysg9SGLwvfJd4eN p{margin:0;}#mermaid-svg-Sysg9SGLwvfJd4eN .label{font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;color:#333;}#mermaid-svg-Sysg9SGLwvfJd4eN .cluster-label text{fill:#333;}#mermaid-svg-Sysg9SGLwvfJd4eN .cluster-label span{color:#333;}#mermaid-svg-Sysg9SGLwvfJd4eN .cluster-label span p{background-color:transparent;}#mermaid-svg-Sysg9SGLwvfJd4eN .label text,#mermaid-svg-Sysg9SGLwvfJd4eN span{fill:#333;color:#333;}#mermaid-svg-Sysg9SGLwvfJd4eN .node rect,#mermaid-svg-Sysg9SGLwvfJd4eN .node circle,#mermaid-svg-Sysg9SGLwvfJd4eN .node ellipse,#mermaid-svg-Sysg9SGLwvfJd4eN .node polygon,#mermaid-svg-Sysg9SGLwvfJd4eN .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-svg-Sysg9SGLwvfJd4eN .rough-node .label text,#mermaid-svg-Sysg9SGLwvfJd4eN .node .label text,#mermaid-svg-Sysg9SGLwvfJd4eN .image-shape .label,#mermaid-svg-Sysg9SGLwvfJd4eN .icon-shape .label{text-anchor:middle;}#mermaid-svg-Sysg9SGLwvfJd4eN .node .katex path{fill:#000;stroke:#000;stroke-width:1px;}#mermaid-svg-Sysg9SGLwvfJd4eN .rough-node .label,#mermaid-svg-Sysg9SGLwvfJd4eN .node .label,#mermaid-svg-Sysg9SGLwvfJd4eN .image-shape .label,#mermaid-svg-Sysg9SGLwvfJd4eN .icon-shape .label{text-align:center;}#mermaid-svg-Sysg9SGLwvfJd4eN .node.clickable{cursor:pointer;}#mermaid-svg-Sysg9SGLwvfJd4eN .root .anchor path{fill:#333333!important;stroke-width:0;stroke:#333333;}#mermaid-svg-Sysg9SGLwvfJd4eN .arrowheadPath{fill:#333333;}#mermaid-svg-Sysg9SGLwvfJd4eN .edgePath .path{stroke:#333333;stroke-width:2.0px;}#mermaid-svg-Sysg9SGLwvfJd4eN .flowchart-link{stroke:#333333;fill:none;}#mermaid-svg-Sysg9SGLwvfJd4eN .edgeLabel{background-color:rgba(232,232,232, 0.8);text-align:center;}#mermaid-svg-Sysg9SGLwvfJd4eN .edgeLabel p{background-color:rgba(232,232,232, 0.8);}#mermaid-svg-Sysg9SGLwvfJd4eN .edgeLabel rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#mermaid-svg-Sysg9SGLwvfJd4eN .labelBkg{background-color:rgba(232, 232, 232, 0.5);}#mermaid-svg-Sysg9SGLwvfJd4eN .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#mermaid-svg-Sysg9SGLwvfJd4eN .cluster text{fill:#333;}#mermaid-svg-Sysg9SGLwvfJd4eN .cluster span{color:#333;}#mermaid-svg-Sysg9SGLwvfJd4eN div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#mermaid-svg-Sysg9SGLwvfJd4eN .flowchartTitleText{text-anchor:middle;font-size:18px;fill:#333;}#mermaid-svg-Sysg9SGLwvfJd4eN rect.text{fill:none;stroke-width:0;}#mermaid-svg-Sysg9SGLwvfJd4eN .icon-shape,#mermaid-svg-Sysg9SGLwvfJd4eN .image-shape{background-color:rgba(232,232,232, 0.8);text-align:center;}#mermaid-svg-Sysg9SGLwvfJd4eN .icon-shape p,#mermaid-svg-Sysg9SGLwvfJd4eN .image-shape p{background-color:rgba(232,232,232, 0.8);padding:2px;}#mermaid-svg-Sysg9SGLwvfJd4eN .icon-shape .label rect,#mermaid-svg-Sysg9SGLwvfJd4eN .image-shape .label rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#mermaid-svg-Sysg9SGLwvfJd4eN .label-icon{display:inline-block;height:1em;overflow:visible;vertical-align:-0.125em;}#mermaid-svg-Sysg9SGLwvfJd4eN .node .label-icon path{fill:currentColor;stroke:revert;stroke-width:revert;}#mermaid-svg-Sysg9SGLwvfJd4eN :root{&#8211;mermaid-font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;} <\/p>\n<p>         <span class=\"edgeLabel\"><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>\u7981\u6b62<\/p>\n<p><\/span> <\/p>\n<p>           <span class=\"nodeLabel\"><\/p>\n<p>\u8f93\u51fa<\/p>\n<p><\/span> <\/p>\n<p>           <span class=\"nodeLabel\"><\/p>\n<p>d \u2208 {ALLOW, DENY, SAFE_MODE}<\/p>\n<p><\/span> <\/p>\n<p>           <span class=\"nodeLabel\"><\/p>\n<p>\u03c0&#xff1a;\u8bc1\u636e\u56fe &#043; \u6c42\u503c\u8def\u5f84 &#043; \u89c4\u5219\u7248\u672c<\/p>\n<p><\/span> <\/p>\n<p>           <span class=\"nodeLabel\"><\/p>\n<p>Runtime<\/p>\n<p><\/span> <\/p>\n<p>           <span class=\"nodeLabel\"><\/p>\n<p>\u89c4\u5219\u6c42\u503c\u65e0\u526f\u4f5c\u7528\u30fb\u6709\u754c\u6b65\u9aa4<\/p>\n<p><\/span> <\/p>\n<p>           <span class=\"nodeLabel\"><\/p>\n<p>\u663e\u5f0f\u8f93\u5165&#xff08;\u5c01\u95ed\u96c6&#xff09;<\/p>\n<p><\/span> <\/p>\n<p>           <span class=\"nodeLabel\"><\/p>\n<p>I<\/p>\n<p><\/span> <\/p>\n<p>           <span class=\"nodeLabel\"><\/p>\n<p>x<\/p>\n<p><\/span> <\/p>\n<p>           <span class=\"nodeLabel\"><\/p>\n<p>P<\/p>\n<p><\/span> <\/p>\n<p>           <span class=\"nodeLabel\"><\/p>\n<p>K<\/p>\n<p><\/span> <\/p>\n<p>           <span class=\"nodeLabel\"><\/p>\n<p>Ev<\/p>\n<p><\/span> <\/p>\n<p>           <span class=\"nodeLabel\"><\/p>\n<p>Ctx<\/p>\n<p><\/span> <\/p>\n<p>           <span class=\"nodeLabel\"><\/p>\n<p>t<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u5916\u90e8\u670d\u52a1 \/ \u7cfb\u7edf\u65f6\u949f \/ \u9690\u5f0f\u7f13\u5b58<\/p>\n<p><\/span> <\/p>\n<p>\u5c01\u95ed\u6027\u7684\u76f4\u63a5\u6536\u76ca\u662f\u53ef\u91cd\u653e&#xff1a;\u7ed9\u5b9a\u540c\u4e00\u8f93\u5165\u96c6&#xff0c;\u4efb\u4f55\u65f6\u523b\u3001\u4efb\u4f55\u5b9e\u73b0\u5747\u53ef\u91cd\u65b0\u6c42\u503c\u5e76\u5f97\u5230\u540c\u4e00\u7ed3\u8bba\u3002\u82e5 Runtime \u8bfb\u53d6\u4e86\u8f93\u5165\u96c6\u4e4b\u5916\u7684\u6570\u636e&#xff0c;\u03c0 \u4fbf\u4e0d\u8db3\u4ee5\u590d\u73b0\u88c1\u51b3&#xff0c;\u5ba1\u8ba1\u5931\u53bb\u4f9d\u636e\u3002<\/p>\n<p>\u7531\u5c01\u95ed\u6027\u8fd8\u53ef\u63a8\u51fa\u5bf9\u9690\u5f0f\u6743\u529b\u7684\u6392\u9664\u3002Runtime \u4e0d\u5e94\u6301\u6709\u4efb\u4f55&#034;\u5728\u7279\u6b8a\u60c5\u51b5\u4e0b\u53ef\u4ee5\u653e\u884c&#034;\u7684\u5185\u5efa\u80fd\u529b&#xff1a;\u6ca1\u6709\u5185\u7f6e\u7684\u7ba1\u7406\u5458\u4f8b\u5916&#xff0c;\u6ca1\u6709\u8c03\u8bd5\u6a21\u5f0f\u4e0b\u7684\u65c1\u8def&#xff0c;\u6ca1\u6709\u8d85\u65f6\u540e\u7684\u9ed8\u8ba4\u901a\u8fc7\u3002\u4efb\u4f55\u6b64\u7c7b\u80fd\u529b\u90fd\u6784\u6210\u4e00\u6761\u4e0d\u5728\u89c4\u5219\u96c6\u4e2d\u3001\u56e0\u800c\u4e0d\u53ef\u88ab\u9759\u6001\u5206\u6790\u53d1\u73b0\u7684\u653e\u884c\u8def\u5f84\u3002<\/p>\n<h4>4.4.3 \u8f93\u51fa\u7ed3\u6784<\/h4>\n<p>Runtime \u7684\u8f93\u51fa\u4e0d\u662f\u5e03\u5c14\u503c\u3002\u4f9d\u636e\u5baa\u6cd5 C4 \u4e0e C5&#xff0c;\u8f93\u51fa\u987b\u5305\u542b\u51b3\u7b56 d \u4e0e\u5224\u5b9a\u8bc1\u660e \u03c0&#xff0c;\u4e14\u5728\u975e\u653e\u884c\u7684\u60c5\u5f62\u4e0b\u987b\u6307\u660e\u5931\u8d25\u8bed\u4e49&#xff08;MISSING \/ UNKNOWN \/ EXPIRED \/ CONFLICT&#xff09;\u4e0e\u5931\u6548\u4f4d\u7f6e\u3002<\/p>\n<p>\u547d\u9898 P4.3&#xff08;\u8f93\u51fa\u7684\u53ef\u64cd\u4f5c\u6027&#xff09; \u82e5 Runtime \u7684\u975e\u653e\u884c\u8f93\u51fa\u4e0d\u6307\u660e\u5931\u6548\u4f4d\u7f6e\u4e0e\u5931\u8d25\u8bed\u4e49&#xff0c;\u5219\u8c03\u7528\u65b9\u65e0\u6cd5\u533a\u5206\u5e94\u5f53\u8865\u5145\u8bc1\u636e\u3001\u4fee\u590d\u9a8c\u8bc1\u901a\u9053\u3001\u91cd\u65b0\u7b7e\u53d1\u8fd8\u662f\u7b49\u5f85\u72ec\u7acb\u88c1\u5b9a\u3002\u6b64\u65f6\u62d2\u7edd\u4e0d\u53ef\u64cd\u4f5c&#xff0c;\u7cfb\u7edf\u5c06\u8d8b\u5411\u4e8e\u901a\u8fc7\u5173\u95ed\u68c0\u67e5\u800c\u975e\u89e3\u51b3\u95ee\u9898\u6765\u6062\u590d\u53ef\u7528\u6027\u3002<\/p>\n<p>P4.3 \u4e0e P3.3 \u662f\u540c\u4e00\u8bba\u8bc1\u5728\u4e0d\u540c\u5c42\u6b21\u7684\u8868\u8ff0&#xff1a;\u53ef\u89e3\u91ca\u6027\u662f\u8fb9\u754c\u7684\u5b58\u6d3b\u6761\u4ef6\u3002Runtime \u7684\u8f93\u51fa\u7ed3\u6784\u662f\u8be5\u6761\u4ef6\u5728\u5b9e\u73b0\u5c42\u7684\u627f\u62c5\u8005\u3002<\/p>\n<h4>4.4.4 \u8d44\u6e90\u7ea6\u675f<\/h4>\n<p>\u5baa\u6cd5 C9 \u8981\u6c42\u7b56\u7565\u5fc5\u7136\u7ec8\u6b62\u4e14\u8d44\u6e90\u53ef\u8ba1\u7b97\u3002Runtime \u987b\u636e\u6b64\u5bf9\u6bcf\u6b21\u6c42\u503c\u65bd\u52a0\u53ef\u9884\u5148\u8ba1\u7b97\u7684\u4e0a\u754c&#xff1a;\u6700\u5927\u6c42\u503c\u6b65\u9aa4\u3001\u6700\u5927\u5185\u5b58\u3001\u6700\u5927\u5d4c\u5957\u6df1\u5ea6\u3001\u6700\u5927\u8bc1\u636e\u6570\u91cf\u3001\u6700\u5927\u89c4\u5219\u590d\u6742\u5ea6\u3002\u8d85\u51fa\u4e0a\u754c\u65f6&#xff0c;\u6b63\u786e\u884c\u4e3a\u4e0d\u662f\u5ef6\u957f\u7b49\u5f85&#xff0c;\u800c\u662f\u6309 SAFE_MODE \u5904\u7f6e\u2014\u2014\u8d44\u6e90\u8017\u5c3d\u662f\u4e00\u79cd\u7cfb\u7edf\u65e0\u6cd5\u5b8c\u6210\u8bc1\u660e\u7684\u72b6\u6001&#xff0c;\u4f9d A8 \u4e0d\u4ea7\u751f ALLOW\u3002<\/p>\n<p>\u8be5\u7ea6\u675f\u540c\u65f6\u6784\u6210\u4e00\u6761\u6297\u62d2\u7edd\u670d\u52a1\u7684\u6027\u8d28&#xff1a;\u7531\u4e8e\u4e0a\u754c\u53ef\u9884\u5148\u8ba1\u7b97&#xff0c;\u653b\u51fb\u8005\u65e0\u6cd5\u901a\u8fc7\u6784\u9020\u590d\u6742\u8f93\u5165\u4f7f\u8fb9\u754c\u9677\u5165\u4e0d\u53ef\u9884\u6d4b\u7684\u957f\u65f6\u95f4\u6c42\u503c&#xff0c;\u4ece\u800c\u65e0\u6cd5\u4ee5\u5ef6\u8fdf\u4e3a\u624b\u6bb5\u5236\u9020\u53ef\u7528\u6027\u538b\u529b&#xff08;\u5a01\u80c1\u7c7b X8&#xff09;\u3002<\/p>\n<h4>4.4.5 \u53ef\u79fb\u690d\u6027\u4e0e\u8bed\u4e49\u4e0d\u6f02\u79fb<\/h4>\n<p>\u6267\u884c\u8fb9\u754c\u4f1a\u90e8\u7f72\u4e8e\u5dee\u5f02\u6781\u5927\u7684\u73af\u5883&#xff1a;\u670d\u52a1\u7aef\u8fdb\u7a0b\u3001\u53ef\u4fe1\u6267\u884c\u73af\u5883\u3001\u72ec\u7acb\u534f\u5904\u7406\u5668\u3001\u5fae\u63a7\u5236\u5668\u3002Runtime \u56e0\u6b64\u987b\u53ef\u79fb\u690d\u3002\u4f46\u53ef\u79fb\u690d\u6027\u5e26\u6765\u4e00\u9879\u98ce\u9669&#xff1a;\u540c\u4e00\u89c4\u5219\u5728\u4e0d\u540c\u5b9e\u73b0\u4e0a\u4ea7\u751f\u4e0d\u540c\u7ed3\u8bba&#xff0c;\u5373\u8bed\u4e49\u6f02\u79fb\u3002<\/p>\n<p>\u547d\u9898 P4.4&#xff08;\u8de8\u5b9e\u73b0\u4e00\u81f4\u6027&#xff09; \u82e5\u4e24\u4e2a Runtime \u5b9e\u73b0\u5bf9\u540c\u4e00 (I, x, P, K, Ev, Ctx, t) \u4ea7\u751f\u4e0d\u540c\u7684 d&#xff0c;\u5219\u4ee5\u8be5\u89c4\u5219\u96c6\u4e3a\u57fa\u7840\u7684\u5b89\u5168\u547d\u9898\u5728\u90e8\u7f72\u73af\u5883\u7684\u5e76\u96c6\u4e0a\u4e0d\u6210\u7acb\u3002<\/p>\n<p>\u56e0\u6b64\u5baa\u6cd5\u987b\u914d\u5957\u4e00\u81f4\u6027\u6d4b\u8bd5\u5957\u4ef6&#xff08;4.3.4&#xff09;&#xff0c;\u4e14\u5b9e\u73b0\u987b\u58f0\u660e\u5176\u6240\u9075\u5faa\u7684\u5baa\u6cd5\u7248\u672c\u3002\u8bed\u4e49\u7684\u6743\u5a01\u6765\u6e90\u662f\u5baa\u6cd5\u4e0e\u6d4b\u8bd5\u5957\u4ef6&#xff0c;\u800c\u975e\u4efb\u4f55\u4e00\u4e2a\u5177\u4f53\u5b9e\u73b0\u2014\u2014\u5305\u62ec\u53c2\u8003\u5b9e\u73b0\u3002<\/p>\n<h4>4.4.6 Runtime \u4e0d\u521b\u9020\u4fe1\u4efb<\/h4>\n<p>\u4e00\u9879\u5bb9\u6613\u4ea7\u751f\u7684\u8bef\u89e3\u662f\u628a Runtime \u89c6\u4e3a\u4fe1\u4efb\u7684\u6765\u6e90&#xff1a;\u201c\u7ecf\u8fc7 Runtime \u88c1\u51b3&#034;\u56e0\u800c&#034;\u662f\u5b89\u5168\u7684\u201d\u3002\u8be5\u8868\u8ff0\u5012\u7f6e\u4e86\u56e0\u679c\u3002Runtime \u4e0d\u751f\u4ea7\u4fe1\u4efb&#xff0c;\u5b83\u53ea\u68c0\u9a8c\u4e0a\u6e38\u63d0\u4ea4\u7684\u8bc1\u636e\u662f\u5426\u6784\u6210\u5b8c\u6574\u8bc1\u660e\u3002\u82e5\u8bc1\u636e\u672c\u8eab\u4e0d\u53ef\u9760&#xff0c;Runtime \u7684 ALLOW \u4e0e\u5176\u53ef\u9760\u6027\u5b8c\u5168\u76f8\u540c\u3002<\/p>\n<p>\u8fd9\u4e00\u8ba4\u8bc6\u51b3\u5b9a\u4e86\u7cfb\u7edf\u7684\u6539\u8fdb\u65b9\u5411&#xff1a;\u63d0\u9ad8\u8fb9\u754c\u5b89\u5168\u6027\u7684\u624b\u6bb5&#xff0c;\u4e0d\u662f\u8ba9 Runtime \u66f4\u806a\u660e&#xff0c;\u800c\u662f\u8ba9\u8fdb\u5165 Runtime \u7684\u8bc1\u636e\u66f4\u53ef\u9a8c\u8bc1\u3001\u8ba9 cap \u7684\u72ec\u5360\u66f4\u5f7b\u5e95\u3002<\/p>\n<hr \/>\n<h3>4.5 Evidence \u4e0e Proof<\/h3>\n<p>\u7b2c 2.5 \u8282\u786e\u7acb\u4e86\u8bc1\u636e\u5728\u63a7\u5236\u7406\u8bba\u5c42\u9762\u7684\u56db\u9879\u8bed\u4e49\u8981\u6c42\u3002\u672c\u8282\u5904\u7406\u5176\u5728\u8bed\u8a00\u5c42\u7684\u843d\u5730\u5f62\u5f0f&#xff0c;\u4ee5\u53ca\u5224\u5b9a\u8bc1\u660e\u4f5c\u4e3a\u4e00\u79cd\u53ef\u4ea4\u4ed8\u5de5\u4ef6\u7684\u7ed3\u6784\u3002<\/p>\n<h4>4.5.1 \u8bc1\u636e\u7684\u7c7b\u578b\u5316<\/h4>\n<p>EBL \u4e2d\u7684\u8bc1\u636e\u662f\u5e26\u7c7b\u578b\u7684\u7ed3\u6784&#xff0c;\u800c\u975e\u5b57\u7b26\u4e32\u6216\u5e03\u5c14\u503c\u3002\u7c7b\u578b\u7684\u4f5c\u7528\u662f\u4f7f&#034;\u8fd9\u4efd\u8bc1\u636e\u80fd\u591f\u8bc1\u660e\u4ec0\u4e48&#034;\u6210\u4e3a\u53ef\u9759\u6001\u68c0\u67e5\u7684\u6027\u8d28&#xff1a;\u4e00\u4efd\u8eab\u4efd\u8bc1\u660e\u4e0d\u80fd\u88ab\u7528\u4e8e\u8bc1\u6210\u8bbe\u5907\u72b6\u6001&#xff0c;\u4e00\u4efd\u4f59\u989d\u5feb\u7167\u4e0d\u80fd\u88ab\u7528\u4e8e\u8bc1\u6210\u5ba1\u6279\u5b8c\u6210\u3002<\/p>\n<p>\u5b9a\u4e49 D4.5.1&#xff08;\u8bc1\u636e\u7c7b\u578b \/ Evidence Type&#xff09; \u4e00\u4e2a\u8bc1\u636e\u7c7b\u578b\u89c4\u5b9a&#xff1a;\u5176\u53ef\u8bc1\u6210\u7684\u6761\u4ef6\u96c6\u5408\u3001\u5fc5\u9700\u7684\u5143\u6570\u636e\u5b57\u6bb5\u3001\u6765\u6e90\u51ed\u636e\u7684\u9a8c\u8bc1\u65b9\u5f0f\u3001\u65f6\u95f4\u8bed\u4e49&#xff08;\u65f6\u70b9\u578b\u6216\u533a\u95f4\u578b&#xff09;&#xff0c;\u4ee5\u53ca\u4e0e\u5176\u4ed6\u7c7b\u578b\u4e4b\u95f4\u7684\u72ec\u7acb\u6027\u5173\u7cfb\u3002<\/p>\n<p>\u7c7b\u578b\u5316\u7684\u5de5\u7a0b\u540e\u679c\u662f\u9519\u8bef\u524d\u79fb\u3002\u7f3a\u5c11\u7c7b\u578b\u65f6&#xff0c;&#034;\u8bc1\u636e\u662f\u5426\u9002\u7528\u4e8e\u8be5\u6761\u4ef6&#034;\u53ea\u80fd\u5728\u6c42\u503c\u65f6\u5224\u65ad&#xff0c;\u4e14\u5224\u65ad\u903b\u8f91\u5206\u6563\u5728\u5404\u6761\u89c4\u5219\u4e2d&#xff1b;\u5177\u5907\u7c7b\u578b\u540e&#xff0c;\u8be5\u95ee\u9898\u5728\u89c4\u5219\u52a0\u8f7d\u9636\u6bb5\u5373\u53ef\u786e\u5b9a&#xff0c;\u4e0d\u9002\u7528\u7684\u5f15\u7528\u88ab\u62d2\u7edd\u52a0\u8f7d&#xff08;\u4e0e 4.3.4 \u4e2d\u3014\u8865\u3015\u6240\u8ff0\u7684\u5904\u7f6e\u4e00\u81f4&#xff09;\u3002<\/p>\n<h4>4.5.2 \u8bc1\u660e\u56fe<\/h4>\n<p>\u5224\u5b9a\u8bc1\u660e \u03c0 \u7684\u7ed3\u6784\u662f\u4e00\u5f20\u6709\u5411\u56fe&#xff08;\u56fe 2-4&#xff09;&#xff1a;\u53f6\u8282\u70b9\u662f\u8bc1\u636e&#xff0c;\u4e2d\u95f4\u8282\u70b9\u662f\u6761\u4ef6\u4e0e\u89c4\u5219\u6c42\u503c&#xff0c;\u6839\u8282\u70b9\u662f\u51b3\u7b56\u3002\u56fe\u7ed3\u6784\u800c\u975e\u7ebf\u6027\u65e5\u5fd7&#xff0c;\u662f\u56e0\u4e3a\u4e00\u9879\u6761\u4ef6\u53ef\u80fd\u7531\u591a\u4efd\u8bc1\u636e\u5171\u540c\u8bc1\u6210&#xff0c;\u4e00\u4efd\u8bc1\u636e\u4e5f\u53ef\u80fd\u53c2\u4e0e\u591a\u9879\u6761\u4ef6\u3002<\/p>\n<p>\u03c0 \u81f3\u5c11\u987b\u627f\u8f7d\u516d\u7c7b\u4fe1\u606f&#xff1a;\u6210\u7acb\u7684\u89c4\u5219\u53ca\u5176\u7248\u672c\u3001\u53c2\u4e0e\u7684\u8bc1\u636e\u53ca\u5176\u72b6\u6001\u3001\u7ed1\u5b9a\u5173\u7cfb&#xff08;I \u2194 x \u2194 Approval&#xff09;\u3001\u88ab\u6ee1\u8db3\u7684\u56fa\u5b9a\u7ea6\u675f\u3001\u6c42\u503c\u8def\u5f84\u3001\u4ee5\u53ca\u6bcf\u4e00\u4efd\u8bc1\u636e\u5728\u5224\u5b9a\u65f6\u523b t \u7684\u65f6\u95f4\u72b6\u6001\u3002<\/p>\n<h4>4.5.3 \u91cd\u653e\u7684\u4e09\u4e2a\u5c42\u6b21<\/h4>\n<p>&#034;\u03c0 \u53ef\u88ab\u91cd\u653e&#034;\u662f\u4e00\u4e2a\u9700\u8981\u5206\u5c42\u7406\u89e3\u7684\u6027\u8d28&#xff0c;\u4e0d\u540c\u5c42\u6b21\u6240\u9700\u7684\u4fdd\u7559\u6570\u636e\u4e0e\u6240\u80fd\u9a8c\u8bc1\u7684\u7ed3\u8bba\u4e0d\u540c\u3002<\/p>\n<p>\u8868 4-3\u3000\u5224\u5b9a\u8bc1\u660e\u7684\u91cd\u653e\u5c42\u6b21<\/p>\n<table>\n<tr>\u5c42\u6b21\u4fdd\u7559\u5185\u5bb9\u53ef\u9a8c\u8bc1\u7684\u7ed3\u8bba\u4e0d\u80fd\u9a8c\u8bc1\u7684\u5185\u5bb9<\/tr>\n<tbody>\n<tr>\n<td>\u4e00\u81f4\u6027\u91cd\u653e<\/td>\n<td>\u8bc1\u636e\u6458\u8981\u3001\u72b6\u6001\u6807\u8bb0\u3001\u89c4\u5219\u7248\u672c\u3001\u6c42\u503c\u8def\u5f84<\/td>\n<td>\u7ed9\u5b9a\u8fd9\u4e9b\u8f93\u5165&#xff0c;\u8be5\u7ed3\u8bba\u662f\u89c4\u5219\u7684\u6b63\u786e\u6c42\u503c<\/td>\n<td>\u8bc1\u636e\u5185\u5bb9\u662f\u5426\u771f\u5b9e<\/td>\n<\/tr>\n<tr>\n<td>\u771f\u5b9e\u6027\u91cd\u653e<\/td>\n<td>\u4e0a\u8ff0 &#043; \u8bc1\u636e\u539f\u6587\u4e0e\u6765\u6e90\u7b7e\u540d<\/td>\n<td>\u8bc1\u636e\u786e\u7531\u58f0\u79f0\u6765\u6e90\u7b7e\u53d1\u4e14\u672a\u88ab\u7be1\u6539<\/td>\n<td>\u7b7e\u53d1\u8005\u7684\u5224\u65ad\u662f\u5426\u6b63\u786e<\/td>\n<\/tr>\n<tr>\n<td>\u65f6\u70b9\u91cd\u653e<\/td>\n<td>\u4e0a\u8ff0 &#043; \u53ef\u4fe1\u65f6\u95f4\u51ed\u636e<\/td>\n<td>\u8bc1\u636e\u5728\u5224\u5b9a\u65f6\u523b\u786e\u5b9e\u5904\u4e8e\u6709\u6548\u671f\u5185<\/td>\n<td>\u2014<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u591a\u6570\u7cfb\u7edf\u65e0\u987b\u4fdd\u7559\u5168\u90e8\u4e09\u5c42\u3002\u53ef\u884c\u7684\u5de5\u7a0b\u6298\u4e2d\u662f&#xff1a;\u9ed8\u8ba4\u4fdd\u7559\u4e00\u81f4\u6027\u91cd\u653e\u6240\u9700\u7684\u6700\u5c0f\u96c6&#xff0c;\u5bf9\u9ad8\u98ce\u9669\u7c7b\u522b\u7684\u6267\u884c\u4fdd\u7559\u771f\u5b9e\u6027\u4e0e\u65f6\u70b9\u91cd\u653e\u6240\u9700\u7684\u5b8c\u6574\u6570\u636e\u3002\u8be5\u9009\u62e9\u5e94\u7531\u5baa\u6cd5\u800c\u975e\u4e1a\u52a1\u7b56\u7565\u89c4\u5b9a&#xff0c;\u5426\u5219\u4fdd\u7559\u7ea7\u522b\u4f1a\u968f\u53ef\u7528\u6027\u538b\u529b\u88ab\u9010\u6b65\u964d\u4f4e\u3002<\/p>\n<p>\u5de5\u7a0b\u7ea6\u5b9a E4.2&#xff08;\u8bc1\u660e\u4fdd\u7559&#xff09; \u8bc1\u660e\u7684\u4fdd\u7559\u7ea7\u522b\u6309\u6267\u884c\u7c7b\u522b\u5728\u5baa\u6cd5\u4e2d\u56fa\u5b9a&#xff0c;\u4e0d\u7531 P \u5c42\u8c03\u6574\u3002\u4ee3\u4ef7\u662f\u5b58\u50a8\u6210\u672c\u4e0a\u5347\u4e0e\u9690\u79c1\u66b4\u9732\u9762\u6269\u5927&#xff0c;\u987b\u4ee5\u7c7b\u522b\u5212\u5206\u800c\u975e\u4e00\u5f8b\u6700\u9ad8\u7ea7\u522b\u6765\u63a7\u5236\u3002<\/p>\n<h4>4.5.4 \u8bc1\u660e\u4e0d\u662f\u6570\u636e\u4ed3\u5e93<\/h4>\n<p>Proof \u7684\u76ee\u7684\u662f\u4f7f\u88c1\u51b3\u53ef\u88ab\u91cd\u65b0\u68c0\u9a8c&#xff0c;\u4e0d\u662f\u4f7f\u7cfb\u7edf\u6301\u6709\u5168\u90e8\u5386\u53f2\u6570\u636e\u3002\u5c06\u4e24\u8005\u6df7\u540c\u4f1a\u4ea7\u751f\u4e24\u7c7b\u95ee\u9898&#xff1a;\u5b58\u50a8\u4e0e\u9690\u79c1\u6210\u672c\u968f\u6267\u884c\u91cf\u7ebf\u6027\u589e\u957f&#xff1b;\u4ee5\u53ca\u5927\u91cf\u4e0e\u88c1\u51b3\u65e0\u5173\u7684\u6570\u636e\u88ab\u7eb3\u5165\u8bc1\u660e&#xff0c;\u4f7f\u8bc1\u660e\u672c\u8eab\u96be\u4ee5\u5ba1\u8ba1\u3002<\/p>\n<p>\u5224\u636e\u662f\u660e\u786e\u7684&#xff1a;\u4e00\u9879\u6570\u636e\u662f\u5426\u8fdb\u5165 \u03c0&#xff0c;\u53d6\u51b3\u4e8e\u5b83\u662f\u5426\u53c2\u4e0e\u4e86\u672c\u6b21\u5224\u5b9a\u3002 \u53c2\u4e0e\u5224\u5b9a\u7684\u6570\u636e\u5fc5\u987b\u8fdb\u5165&#xff0c;\u672a\u53c2\u4e0e\u7684\u6570\u636e\u4e0d\u5e94\u8fdb\u5165\u2014\u2014\u540e\u8005\u5c5e\u4e8e\u65e5\u5fd7\u7684\u804c\u8d23\u8303\u56f4&#xff08;\u8868 2-3&#xff09;\u3002<\/p>\n<hr \/>\n<h3>4.6 \u6700\u5c0f\u7406\u8bba\u6a21\u578b\u4e0e\u975e\u76ee\u6807<\/h3>\n<h4>4.6.1 \u516d\u7c7b\u5bf9\u8c61<\/h4>\n<p>\u5728\u4e0d\u8fdb\u5165\u5177\u4f53\u8bed\u6cd5\u8bbe\u8ba1\u7684\u524d\u63d0\u4e0b&#xff0c;EBL \u7684\u7406\u8bba\u6a21\u578b\u53ef\u5f52\u7ed3\u4e3a\u516d\u7c7b\u5bf9\u8c61\u53ca\u5176\u5173\u7cfb\u3002<\/p>\n<p>\u56fe 4-3\u3000EBL \u7684\u516d\u7c7b\u5bf9\u8c61<\/p>\n<p>  #mermaid-svg-Io24ioUmmF4NOgVj{font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;font-size:16px;fill:#333;}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#mermaid-svg-Io24ioUmmF4NOgVj .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#mermaid-svg-Io24ioUmmF4NOgVj .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#mermaid-svg-Io24ioUmmF4NOgVj .error-icon{fill:#552222;}#mermaid-svg-Io24ioUmmF4NOgVj .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-Io24ioUmmF4NOgVj .edge-thickness-normal{stroke-width:1px;}#mermaid-svg-Io24ioUmmF4NOgVj .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-Io24ioUmmF4NOgVj .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-Io24ioUmmF4NOgVj .edge-thickness-invisible{stroke-width:0;fill:none;}#mermaid-svg-Io24ioUmmF4NOgVj .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-Io24ioUmmF4NOgVj .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-Io24ioUmmF4NOgVj .marker{fill:#333333;stroke:#333333;}#mermaid-svg-Io24ioUmmF4NOgVj .marker.cross{stroke:#333333;}#mermaid-svg-Io24ioUmmF4NOgVj svg{font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-Io24ioUmmF4NOgVj p{margin:0;}#mermaid-svg-Io24ioUmmF4NOgVj .label{font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;color:#333;}#mermaid-svg-Io24ioUmmF4NOgVj .cluster-label text{fill:#333;}#mermaid-svg-Io24ioUmmF4NOgVj .cluster-label span{color:#333;}#mermaid-svg-Io24ioUmmF4NOgVj .cluster-label span p{background-color:transparent;}#mermaid-svg-Io24ioUmmF4NOgVj .label text,#mermaid-svg-Io24ioUmmF4NOgVj span{fill:#333;color:#333;}#mermaid-svg-Io24ioUmmF4NOgVj .node rect,#mermaid-svg-Io24ioUmmF4NOgVj .node circle,#mermaid-svg-Io24ioUmmF4NOgVj .node ellipse,#mermaid-svg-Io24ioUmmF4NOgVj .node polygon,#mermaid-svg-Io24ioUmmF4NOgVj .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-svg-Io24ioUmmF4NOgVj .rough-node .label text,#mermaid-svg-Io24ioUmmF4NOgVj .node .label text,#mermaid-svg-Io24ioUmmF4NOgVj .image-shape .label,#mermaid-svg-Io24ioUmmF4NOgVj .icon-shape .label{text-anchor:middle;}#mermaid-svg-Io24ioUmmF4NOgVj .node .katex path{fill:#000;stroke:#000;stroke-width:1px;}#mermaid-svg-Io24ioUmmF4NOgVj .rough-node .label,#mermaid-svg-Io24ioUmmF4NOgVj .node .label,#mermaid-svg-Io24ioUmmF4NOgVj .image-shape .label,#mermaid-svg-Io24ioUmmF4NOgVj .icon-shape .label{text-align:center;}#mermaid-svg-Io24ioUmmF4NOgVj .node.clickable{cursor:pointer;}#mermaid-svg-Io24ioUmmF4NOgVj .root .anchor path{fill:#333333!important;stroke-width:0;stroke:#333333;}#mermaid-svg-Io24ioUmmF4NOgVj .arrowheadPath{fill:#333333;}#mermaid-svg-Io24ioUmmF4NOgVj .edgePath .path{stroke:#333333;stroke-width:2.0px;}#mermaid-svg-Io24ioUmmF4NOgVj .flowchart-link{stroke:#333333;fill:none;}#mermaid-svg-Io24ioUmmF4NOgVj .edgeLabel{background-color:rgba(232,232,232, 0.8);text-align:center;}#mermaid-svg-Io24ioUmmF4NOgVj .edgeLabel p{background-color:rgba(232,232,232, 0.8);}#mermaid-svg-Io24ioUmmF4NOgVj .edgeLabel rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#mermaid-svg-Io24ioUmmF4NOgVj .labelBkg{background-color:rgba(232, 232, 232, 0.5);}#mermaid-svg-Io24ioUmmF4NOgVj .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#mermaid-svg-Io24ioUmmF4NOgVj .cluster text{fill:#333;}#mermaid-svg-Io24ioUmmF4NOgVj .cluster span{color:#333;}#mermaid-svg-Io24ioUmmF4NOgVj div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#mermaid-svg-Io24ioUmmF4NOgVj .flowchartTitleText{text-anchor:middle;font-size:18px;fill:#333;}#mermaid-svg-Io24ioUmmF4NOgVj rect.text{fill:none;stroke-width:0;}#mermaid-svg-Io24ioUmmF4NOgVj .icon-shape,#mermaid-svg-Io24ioUmmF4NOgVj .image-shape{background-color:rgba(232,232,232, 0.8);text-align:center;}#mermaid-svg-Io24ioUmmF4NOgVj .icon-shape p,#mermaid-svg-Io24ioUmmF4NOgVj .image-shape p{background-color:rgba(232,232,232, 0.8);padding:2px;}#mermaid-svg-Io24ioUmmF4NOgVj .icon-shape .label rect,#mermaid-svg-Io24ioUmmF4NOgVj .image-shape .label rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#mermaid-svg-Io24ioUmmF4NOgVj .label-icon{display:inline-block;height:1em;overflow:visible;vertical-align:-0.125em;}#mermaid-svg-Io24ioUmmF4NOgVj .node .label-icon path{fill:currentColor;stroke:revert;stroke-width:revert;}#mermaid-svg-Io24ioUmmF4NOgVj :root{&#8211;mermaid-font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;} <\/p>\n<p>         <span class=\"edgeLabel\"><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/span> <\/p>\n<p>         <span class=\"edgeLabel\"><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>Intent\u76ee\u6807\u4e0e\u4e0d\u53ef\u53d8\u7ea6\u675f I.inv<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>Candidate Execution\u5373\u5c06\u8fdb\u5165\u73b0\u5b9e\u7684\u7cbe\u786e\u52a8\u4f5c<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>Policy\u4e1a\u52a1\u5fc5\u8981\u6761\u4ef6<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>Constitution\u4e0d\u53ef\u5173\u95ed\u7684\u56fa\u5b9a\u5e95\u7ebf<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>Evidence\u53ef\u9a8c\u8bc1\u4e8b\u5b9e<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>Decision ProofALLOW \u6216\u5931\u8d25\u8bed\u4e49\u53ca\u5176\u7406\u7531<\/p>\n<p><\/span> <\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>Runtime\u0393<\/p>\n<p><\/span> <\/p>\n<p>\u6a21\u578b\u4e2d\u523b\u610f\u4e0d\u5305\u542b&#034;\u6267\u884c\u52a8\u4f5c&#034;\u8fd9\u4e00\u5bf9\u8c61\u3002\u6267\u884c\u4e0d\u5c5e\u4e8e EBL \u7684\u804c\u8d23\u8303\u56f4\u2014\u2014EBL \u53ea\u51b3\u5b9a\u5019\u9009\u6267\u884c\u662f\u5426\u83b7\u5f97\u8de8\u8d8a\u8fb9\u754c\u7684\u8d44\u683c&#xff0c;\u52a8\u4f5c\u7684\u5b9e\u65bd\u7531\u6301\u6709 cap \u7684\u8fb9\u754c\u4e0e\u4e0b\u6e38\u7cfb\u7edf\u5b8c\u6210\u3002<\/p>\n<h4>4.6.2 \u975e\u76ee\u6807<\/h4>\n<p>\u660e\u786e EBL \u4e0d\u662f\u4ec0\u4e48&#xff0c;\u4e0e\u660e\u786e\u5b83\u662f\u4ec0\u4e48\u540c\u7b49\u91cd\u8981&#xff0c;\u56e0\u4e3a\u6bcf\u4e00\u9879\u8bef\u7f6e\u7684\u671f\u5f85\u90fd\u4f1a\u5f15\u5165\u4e00\u7c7b\u8981\u6c42\u8bed\u8a00\u6269\u5f20\u80fd\u529b\u7684\u538b\u529b&#xff0c;\u800c\u80fd\u529b\u6269\u5f20\u4e0e 4.1 \u6240\u7acb\u7684\u4e94\u9879\u8981\u6c42\u76f4\u63a5\u51b2\u7a81\u3002<\/p>\n<p>\u8868 4-4\u3000EBL \u7684\u975e\u76ee\u6807<\/p>\n<table>\n<tr>EBL \u4e0d\u662f\u7406\u7531<\/tr>\n<tbody>\n<tr>\n<td>AI \u7f16\u7a0b\u8bed\u8a00<\/td>\n<td>\u5b83\u4e0d\u751f\u6210\u884c\u52a8&#xff0c;\u4e0d\u63cf\u8ff0\u4efb\u52a1&#xff0c;\u4e0d\u53c2\u4e0e\u89c4\u5212<\/td>\n<\/tr>\n<tr>\n<td>\u5de5\u4f5c\u6d41\u8bed\u8a00<\/td>\n<td>\u5b83\u4e0d\u7f16\u6392\u6b65\u9aa4&#xff0c;\u4e0d\u8868\u8fbe\u6d41\u7a0b\u72b6\u6001\u673a&#xff0c;\u4e0d\u5904\u7406\u957f\u4e8b\u52a1<\/td>\n<\/tr>\n<tr>\n<td>\u6743\u9650\u8bed\u8a00<\/td>\n<td>\u5b83\u5224\u5b9a\u5355\u6b21\u6267\u884c\u800c\u975e\u4e3b\u4f53\u7684\u957f\u671f\u8d44\u683c&#xff08;\u8868 2-1&#xff09;<\/td>\n<\/tr>\n<tr>\n<td>\u901a\u7528\u89c4\u5219\u5f15\u64ce<\/td>\n<td>\u5b83\u975e\u56fe\u7075\u5b8c\u5907&#xff0c;\u4e0d\u8ffd\u6c42\u8868\u8fbe\u4efb\u610f\u4e1a\u52a1\u903b\u8f91&#xff08;P4.1&#xff09;<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h4>4.6.3 \u4e0e\u65e2\u6709\u7cfb\u7edf\u7684\u5173\u7cfb<\/h4>\n<p>EBL \u4e0d\u53d6\u4ee3\u73b0\u6709\u7cfb\u7edf&#xff0c;\u5b83\u5728\u65e2\u6709\u7cfb\u7edf\u4e4b\u4e0a\u589e\u52a0\u4e00\u5c42\u5171\u540c\u8bed\u8a00\u3002\u8eab\u4efd\u7cfb\u7edf\u7ee7\u7eed\u63d0\u4f9b\u8eab\u4efd\u4fe1\u606f&#xff0c;\u5ba1\u6279\u7cfb\u7edf\u7ee7\u7eed\u7ec4\u7ec7\u6210\u5458\u8868\u8fbe\u540c\u610f&#xff0c;\u4e1a\u52a1\u7cfb\u7edf\u7ee7\u7eed\u751f\u6210\u5019\u9009\u6267\u884c&#xff0c;AI \u7ee7\u7eed\u7406\u89e3\u76ee\u6807\u4e0e\u89c4\u5212\u65b9\u6848&#xff0c;\u786c\u4ef6\u7ee7\u7eed\u63a7\u5236\u5bc6\u94a5\u4e0e\u8bbe\u5907\u80fd\u529b\u3002EBL \u6240\u589e\u52a0\u7684&#xff0c;\u662f\u628a\u8fd9\u4e9b\u5206\u6563\u7cfb\u7edf\u7684\u8f93\u51fa\u7ec4\u7ec7\u6210\u4e00\u4e2a\u53ef\u88ab\u6700\u7ec8\u8fb9\u754c\u9a8c\u8bc1\u7684\u8bc1\u660e\u3002<\/p>\n<p>\u8fd9\u4e00\u5b9a\u4f4d\u51b3\u5b9a\u4e86\u91c7\u7528\u6210\u672c\u7684\u5f62\u6001&#xff1a;EBL \u4e0d\u8981\u6c42\u5404\u7cfb\u7edf\u6539\u53d8\u5185\u90e8\u5b9e\u73b0&#xff0c;\u53ea\u8981\u6c42\u5b83\u4eec\u5728\u8fdb\u5165\u8fb9\u754c\u65f6&#xff0c;\u5c06\u5173\u952e\u4e8b\u5b9e\u4e0e\u5173\u7cfb\u8f6c\u6362\u4e3a\u53ef\u9a8c\u8bc1\u7684\u8bc1\u636e\u5f62\u5f0f\u3002\u8fd9\u662f\u4e00\u9879\u63a5\u53e3\u5c42\u7684\u8981\u6c42&#xff0c;\u800c\u975e\u67b6\u6784\u5c42\u7684\u66ff\u6362\u3002<\/p>\n<hr \/>\n<h2>\u9644\u5f55<\/h2>\n<p>\u5173\u4e8e\u53c2\u8003\u5b9e\u73b0\u7684\u8bf4\u660e \u672c\u90e8\u5206\u7684\u53c2\u8003\u67b6\u6784\u4e0e\u6848\u4f8b\u6765\u6e90\u4e8e\u771f\u5b9e\u5de5\u7a0b\u5b9e\u8df5&#xff0c;\u7ecf\u8fc7\u62bd\u8c61\u4e0e\u7b80\u5316&#xff0c;\u76ee\u7684\u662f\u8bf4\u660e\u7406\u8bba\u5982\u4f55\u843d\u5730&#xff0c;\u800c\u975e\u63cf\u8ff0\u67d0\u4e00\u5546\u4e1a\u4ea7\u54c1\u7684\u5b8c\u6574\u5b9e\u73b0\u3002\u6587\u4e2d\u51fa\u73b0\u7684 Bletchley SaaS \u4e0e Enigma \u6267\u884c\u8fb9\u754c\u4e3a\u8be5\u5b9e\u8df5\u4e2d\u7684\u7ec4\u4ef6\u540d\u79f0&#xff0c;\u672c\u4e66\u5c06\u5176\u4f5c\u4e3a\u53c2\u8003\u5b9e\u73b0\u5f15\u7528&#xff1b;\u5177\u4f53\u7684\u534f\u8bae\u5b57\u6bb5\u3001\u5bc6\u94a5\u6d3e\u751f\u8fc7\u7a0b\u3001\u56fa\u4ef6\u72b6\u6001\u673a\u4e0e\u751f\u4ea7\u53c2\u6570\u4e0d\u5728\u672c\u4e66\u8303\u56f4\u5185\u3002<\/p>\n<hr \/>\n<h2>\u9644\u5f55 A\u3000\u7aef\u5230\u7aef\u6848\u4f8b\u63a8\u6f14<\/h2>\n<p>\u672c\u9644\u5f55\u4ee5\u4e00\u4e2a\u7b80\u5316\u6848\u4f8b&#xff0c;\u5c55\u793a\u4eba\u7684\u610f\u56fe\u5982\u4f55\u7ecf\u8fc7 AI \u5e94\u7528\u3001\u534f\u540c\u6cbb\u7406\u5c42\u3001EBL\u3001Runtime \u4e0e\u72ec\u7acb\u786c\u4ef6\u8fb9\u754c&#xff0c;\u6700\u7ec8\u8f6c\u5316\u4e3a\u4e00\u6b21\u73b0\u5b9e\u6267\u884c\u3002\u6848\u4f8b\u7684\u8bbe\u8ba1\u76ee\u7684\u662f\u4f7f\u524d\u4e09\u7ae0\u7684\u7ed3\u8bba\u4e0e\u7b2c 4 \u7ae0\u7684\u673a\u5236\u5f62\u6210\u4e00\u6b21\u53ef\u68c0\u9a8c\u7684\u95ed\u73af&#xff0c;\u56e0\u6b64\u7b2c\u4e00\u6b21\u63d0\u4ea4\u88ab\u8bbe\u8ba1\u4e3a\u5931\u8d25\u2014\u2014\u5931\u8d25\u5e76\u975e\u6e90\u4e8e\u653b\u51fb\u6216\u660e\u663e\u9519\u8bef&#xff0c;\u800c\u6e90\u4e8e\u4e00\u4efd\u5df2\u7ecf\u8fc7\u671f\u7684\u72b6\u6001\u8bc1\u636e\u3002<\/p>\n<\/p>\n<h3>A.1 \u573a\u666f\u4e0e\u610f\u56fe\u5bf9\u8c61<\/h3>\n<p>\u67d0\u4f01\u4e1a\u4f7f\u7528 AI Agent \u534f\u52a9\u7ba1\u7406\u8fdc\u7a0b\u5de5\u4e1a\u8bbe\u5907 DEVICE-042\u3002\u7ef4\u62a4\u8d1f\u8d23\u4eba\u5411 Agent \u63d0\u4ea4\u610f\u56fe&#xff1a;\u5728\u4eca\u65e5\u7ef4\u62a4\u7a97\u53e3\u5185\u4f7f\u8be5\u8bbe\u5907\u8fdb\u5165\u7ef4\u62a4\u6a21\u5f0f\u5e76\u505c\u6b62\u4e3b\u52a8\u529b\u6a21\u5757&#xff0c;\u64cd\u4f5c\u987b\u7531\u4e24\u540d\u76f8\u4e92\u72ec\u7acb\u7684\u7ef4\u62a4\u6210\u5458\u786e\u8ba4&#xff0c;\u4e14\u8bbe\u5907\u987b\u5904\u4e8e\u65e0\u4eba\u8fd0\u884c\u72b6\u6001\u3002<\/p>\n<p>\u8be5\u81ea\u7136\u8bed\u8a00\u8868\u8ff0\u4e0d\u662f\u6267\u884c\u547d\u4ee4\u3002\u4f9d\u636e\u516c\u7406 A1 \u4e0e\u5b9a\u4e49 D2.2.1&#xff0c;\u5b83\u9996\u5148\u88ab\u56fa\u5316\u4e3a\u53ef\u9a8c\u8bc1\u7684\u610f\u56fe\u5bf9\u8c61&#xff1a;<\/p>\n<p>Intent ID: INT-2027-0042<br \/>\nTarget:    DEVICE-042<br \/>\nAction:    ENTER_MAINTENANCE_MODE<br \/>\nI.inv:<br \/>\n  &#8211; main_drive must stop<br \/>\n  &#8211; device must be unoccupied<br \/>\n  &#8211; two independent approvals required<br \/>\n  &#8211; execution must occur within maintenance window<\/p>\n<p>\u89c4\u8303\u5316\u540e\u8ba1\u7b97 intent_hash\u3002\u6b64\u540e\u7684\u5ba1\u6279\u3001\u8bc1\u636e\u3001\u5019\u9009\u6267\u884c\u4e0e\u6700\u7ec8\u8bbe\u5907\u547d\u4ee4&#xff0c;\u5747\u987b\u7ed1\u5b9a\u8be5\u503c&#xff08;A3&#xff09;\u3002<\/p>\n<\/p>\n<h3>A.2 \u5019\u9009\u6267\u884c<\/h3>\n<p>Agent \u4f9d\u636e\u610f\u56fe\u751f\u6210\u5019\u9009\u6267\u884c\u5bf9\u8c61&#xff1a;<\/p>\n<p>Candidate ID: CAND-042-01<br \/>\nDevice:       DEVICE-042<br \/>\nCommand:      mode &#061; maintenance<br \/>\n              main_drive &#061; stop<br \/>\nIntent Hash:  H(INT-2027-0042)<\/p>\n<p>\u6b64\u65f6\u8be5\u5bf9\u8c61\u4e0d\u80fd\u88ab\u53d1\u9001\u81f3\u8bbe\u5907\u3002AI \u7684\u804c\u8d23\u5728\u6b64\u7ec8\u6b62\u4e8e&#034;\u63d0\u51fa\u5019\u9009&#034;\u2014\u2014\u4f9d\u636e\u516c\u7406 A6 \u4e0e\u5b9a\u4e49 D2.3.1&#xff0c;\u751f\u6210\u65b9\u4e0d\u6301\u6709\u653e\u884c\u6743\u3002\u5019\u9009\u5bf9\u8c61\u968f\u540e\u63d0\u4ea4\u81f3\u534f\u540c\u6cbb\u7406\u5c42&#xff0c;\u7531\u5176\u5c55\u793a\u610f\u56fe\u4e0e\u6700\u7ec8\u8bbe\u5907\u547d\u4ee4\u3001\u6536\u96c6\u5ba1\u6279\u3001\u83b7\u53d6\u8bbe\u5907\u8bc1\u636e\u3001\u52a0\u8f7d\u5bf9\u5e94\u7b56\u7565\u5e76\u6784\u9020\u88c1\u51b3\u8f93\u5165\u3002<\/p>\n<\/p>\n<h3>A.3 EBL \u7b56\u7565\u4e0e AST<\/h3>\n<p>\u8be5\u64cd\u4f5c\u5bf9\u5e94\u7684\u8fb9\u754c\u7b56\u7565\u53ef\u62bd\u8c61\u8868\u8ff0\u4e3a&#xff1a;<\/p>\n<p>require candidate.intent_hash          &#061;&#061; intent.hash<br \/>\nrequire candidate.device_id            &#061;&#061; intent.target<br \/>\nrequire candidate.command.mode         &#061;&#061; maintenance<br \/>\nrequire candidate.command.main_drive   &#061;&#061; stop<br \/>\nrequire approval.count                 &gt;&#061; 2<br \/>\nrequire approval.independent_domains   &gt;&#061; 2<br \/>\nrequire evidence.device_identity.valid &#061;&#061; true<br \/>\nrequire evidence.device_occupancy.state &#061;&#061; unoccupied<br \/>\nrequire evidence.device_occupancy.age  &lt;&#061; 30 seconds<br \/>\nrequire evidence.maintenance_window.active &#061;&#061; true<\/p>\n<p>\u8be5\u7b56\u7565\u4e0d\u8bbf\u95ee\u7f51\u7edc&#xff0c;\u4e0d\u91cd\u65b0\u67e5\u8be2\u8bbe\u5907&#xff0c;\u4e0d\u8865\u5145\u8bc1\u636e&#xff0c;\u4e0d\u4fee\u6539\u5019\u9009\u5bf9\u8c61\u2014\u2014\u5b83\u53ea\u58f0\u660e\u5019\u9009\u6267\u884c\u987b\u6ee1\u8db3\u7684\u6761\u4ef6\u96c6\u5408\u3002\u8fd9\u4e9b\u9650\u5236\u4e0d\u662f\u5b9e\u73b0\u7ea6\u5b9a&#xff0c;\u800c\u662f\u5baa\u6cd5 C1\u3001C2\u3001C9 \u5728\u8bed\u6cd5\u5c42\u7684\u7ed3\u679c&#xff08;4.3.3&#xff09;\u3002<\/p>\n<p>\u7b56\u7565\u89e3\u6790\u540e\u5f62\u6210\u62bd\u8c61\u8bed\u6cd5\u6811&#xff1a;<\/p>\n<p>AND<br \/>\n\u251c\u2500\u2500 BIND(candidate.intent_hash, intent.hash)<br \/>\n\u251c\u2500\u2500 EQ(candidate.device_id, intent.target)<br \/>\n\u251c\u2500\u2500 EQ(candidate.command.mode, maintenance)<br \/>\n\u251c\u2500\u2500 EQ(candidate.command.main_drive, stop)<br \/>\n\u251c\u2500\u2500 GTE(count(valid_approvals), 2)<br \/>\n\u251c\u2500\u2500 GTE(count(independent_domains), 2)<br \/>\n\u251c\u2500\u2500 VALID(device_identity_evidence)<br \/>\n\u251c\u2500\u2500 EQ(device_occupancy.state, unoccupied)<br \/>\n\u251c\u2500\u2500 LTE(device_occupancy.age, 30s)<br \/>\n\u2514\u2500\u2500 EQ(maintenance_window.active, true)<\/p>\n<p>AST \u7684\u4ef7\u503c\u4e0d\u5728\u4e8e\u589e\u52a0\u8868\u8fbe\u590d\u6742\u5ea6&#xff0c;\u800c\u5728\u4e8e\u6d88\u9664\u6587\u672c\u6b67\u4e49\u5e76\u652f\u6301\u9759\u6001\u9a8c\u8bc1\u3002\u52a0\u8f7d\u524d&#xff0c;\u9a8c\u8bc1\u5668\u68c0\u67e5\u7b56\u7565\u662f\u5426\u5fc5\u7136\u7ec8\u6b62\u3001\u662f\u5426\u5f15\u7528\u672a\u58f0\u660e\u8bc1\u636e\u3001\u662f\u5426\u5305\u542b\u5916\u90e8\u526f\u4f5c\u7528\u3001\u662f\u5426\u8d85\u51fa\u8d44\u6e90\u4e0a\u754c\u3001\u662f\u5426\u8bd5\u56fe\u8986\u76d6\u5baa\u6cd5\u3001\u662f\u5426\u5bf9\u56db\u6001\u4f5c\u51fa\u663e\u5f0f\u5904\u7406\u3002\u4efb\u4e00\u9879\u4e0d\u901a\u8fc7&#xff0c;\u89c4\u5219\u88ab\u62d2\u7edd\u52a0\u8f7d\u800c\u975e\u90e8\u7f72\u540e\u5ffd\u7565&#xff08;4.3.4&#xff09;\u3002<\/p>\n<\/p>\n<h3>A.4 \u7b2c\u4e00\u6b21\u88c1\u51b3&#xff1a;EXPIRED<\/h3>\n<p>\u6cbb\u7406\u5c42\u6536\u96c6\u5230\u7684\u5ba1\u6279\u8f93\u5165&#xff1a;<\/p>\n<p>Approval A: MAINTAINER-01 \u2502 Trust Domain: TEAM-A \u2502 Bound: H(INT-2027-0042) \u2502 valid<br \/>\nApproval B: MAINTAINER-02 \u2502 Trust Domain: TEAM-B \u2502 Bound: H(INT-2027-0042) \u2502 valid<\/p>\n<p>\u4e24\u540d\u5ba1\u6279\u8005\u5c5e\u4e8e\u4e0d\u540c\u4fe1\u4efb\u57df&#xff0c;\u56e0\u800c\u6ee1\u8db3\u5173\u7cfb\u72ec\u7acb\u6027\u8981\u6c42&#xff08;P2.5&#xff09;\u3002\u6ce8\u610f\u6b64\u5904\u6210\u7acb\u7684\u4f9d\u636e\u4e0d\u662f\u6570\u91cf\u4e3a\u4e8c&#xff0c;\u800c\u662f\u4fe1\u4efb\u57df\u4e3a\u4e8c\u3002<\/p>\n<p>\u8bbe\u5907\u8eab\u4efd\u8bc1\u636e\u9a8c\u8bc1\u901a\u8fc7&#xff1a;<\/p>\n<p>Device Identity Evidence:<br \/>\n  Subject: DEVICE-042 \u2502 Firmware Measurement: accepted<br \/>\n  Device Signature: valid \u2502 Status: VALID<\/p>\n<p>\u8bbe\u5907\u5360\u7528\u72b6\u6001\u8bc1\u636e\u663e\u793a\u65e0\u4eba\u8fd0\u884c&#xff1a;<\/p>\n<p>Device Occupancy Evidence:<br \/>\n  Subject: DEVICE-042 \u2502 State: unoccupied<br \/>\n  Observed At: 10:00:00 \u2502 Maximum Age: 30s<\/p>\n<p>\u800c Runtime \u7684\u5224\u5b9a\u65f6\u523b\u4e3a t &#061; 10:00:47\u3002\u8be5\u8bc1\u636e\u5df2\u5b58\u5728\u56db\u5341\u4e03\u79d2&#xff0c;\u8d85\u51fa\u5176\u58f0\u660e\u7684\u6709\u6548\u671f\u3002\u5b83\u66fe\u7ecf\u6210\u7acb&#xff0c;\u4f46\u4e0d\u80fd\u8bc1\u660e\u8bbe\u5907\u5f53\u524d\u4ecd\u5904\u4e8e\u65e0\u4eba\u8fd0\u884c\u72b6\u6001\u3002\u4f9d\u636e\u516c\u7406 A8&#xff0c;\u5176\u72b6\u6001\u4e3a EXPIRED \u800c\u975e TRUE&#xff1a;<\/p>\n<p>Decision: DENY<br \/>\nFailed Rule: evidence.device_occupancy.age &lt;&#061; 30 seconds<br \/>\nFailure Semantics: EXPIRED<\/p>\n<h3>A.5 Fail Secure<\/h3>\n<p>\u6b64\u523b\u7684\u5904\u5883\u503c\u5f97\u9010\u9879\u786e\u8ba4&#xff1a;\u5ba1\u6279\u5df2\u83b7\u5f97\u4e14\u72ec\u7acb\u6027\u6210\u7acb&#xff0c;\u5019\u9009\u5bf9\u8c61\u672a\u53d1\u73b0\u9519\u8bef&#xff0c;\u8bbe\u5907\u8eab\u4efd\u9a8c\u8bc1\u901a\u8fc7&#xff0c;\u7ef4\u62a4\u7a97\u53e3\u4ecd\u7136\u6709\u6548\u3002\u552f\u4e00\u4e0d\u6210\u7acb\u7684\u662f\u4e00\u4efd\u72b6\u6001\u8bc1\u636e\u7684\u65f6\u6548\u3002<\/p>\n<p>Runtime \u4e0d\u56e0&#034;\u591a\u6570\u6761\u4ef6\u5df2\u6ee1\u8db3&#034;\u800c\u653e\u884c\u3002\u786c\u4ef6\u8fb9\u754c\u672a\u6536\u5230\u6709\u6548\u7684 ALLOW \u8bc1\u660e&#xff0c;\u56e0\u6b64\u4e0d\u91ca\u653e\u8bbe\u5907\u63a7\u5236\u80fd\u529b&#xff0c;\u5019\u9009\u6267\u884c\u4fdd\u6301\u963b\u585e&#xff0c;\u6267\u884c\u6a21\u5757\u672a\u6536\u5230\u4efb\u4f55\u547d\u4ee4\u3002<\/p>\n<p>\u8fd9\u6b63\u662f Fail Secure \u7684\u542b\u4e49&#xff08;3.4&#xff09;\u3002\u7cfb\u7edf\u6ca1\u6709\u63a8\u6d4b\u8bbe\u5907\u53ef\u80fd\u4ecd\u7136\u65e0\u4eba&#xff0c;\u6ca1\u6709\u6cbf\u7528\u7f13\u5b58\u72b6\u6001&#xff0c;\u6ca1\u6709\u56e0\u7ef4\u62a4\u7a97\u53e3\u5373\u5c06\u7ed3\u675f\u800c\u964d\u4f4e\u6807\u51c6&#xff0c;\u4e5f\u6ca1\u6709\u5141\u8bb8\u7ba1\u7406\u5458\u4e34\u65f6\u5c06\u8bc1\u636e\u6709\u6548\u671f\u6539\u4e3a\u65e0\u9650\u2014\u2014\u6700\u540e\u4e00\u9879\u88ab\u5baa\u6cd5 C10 \u6392\u9664&#xff0c;\u800c\u975e\u4f9d\u8d56\u8fd0\u7ef4\u7eaa\u5f8b\u3002<\/p>\n<\/p>\n<h3>A.6 \u8bc1\u636e\u66f4\u65b0\u4e0e\u7b2c\u4e8c\u6b21\u88c1\u51b3<\/h3>\n<p>\u6cbb\u7406\u5c42\u8bf7\u6c42\u72b6\u6001\u91c7\u96c6\u6a21\u5757\u91cd\u65b0\u751f\u6210\u8bc1\u636e&#xff1a;<\/p>\n<p>Device Occupancy Evidence:<br \/>\n  Subject: DEVICE-042 \u2502 State: unoccupied<br \/>\n  Observed At: 10:01:02 \u2502 Maximum Age: 30s \u2502 Device Signature: valid<\/p>\n<p>\u65b0\u8bc1\u636e\u4e0e\u8bbe\u5907\u6807\u8bc6\u3001\u5f53\u524d\u8bbe\u5907\u4f1a\u8bdd\u3001\u5f53\u524d\u610f\u56fe\u3001\u5f53\u524d\u5019\u9009\u5bf9\u8c61\u4e0e\u5f53\u524d\u65f6\u95f4\u7a97\u53e3\u5b8c\u6210\u7ed1\u5b9a\u3002\u7b2c\u4e00\u6b21\u5931\u8d25\u7684\u88c1\u51b3\u8bb0\u5f55\u4e0d\u88ab\u4fee\u6539\u6216\u5220\u9664&#xff0c;\u5b83\u4fdd\u7559\u5728\u8bc1\u636e\u5b58\u50a8\u4e2d\u2014\u2014\u4f9d\u636e 3.3.2&#xff0c;\u5931\u8d25\u8bb0\u5f55\u627f\u8f7d\u7684\u662f\u6062\u590d\u8def\u5f84\u4fe1\u606f&#xff0c;\u5220\u9664\u5b83\u7b49\u4e8e\u5220\u9664\u8fd0\u7ef4\u4f9d\u636e\u3002<\/p>\n<p>Runtime \u4ee5\u76f8\u540c\u7b56\u7565\u4e0e\u66f4\u65b0\u540e\u7684\u8bc1\u636e\u91cd\u65b0\u6c42\u503c AST&#xff0c;\u5404\u9879\u6761\u4ef6\u5747\u6210\u7acb&#xff0c;\u4ea7\u751f d &#061; ALLOW\u3002\u4f46 ALLOW \u4e0d\u662f\u5b64\u7acb\u7684\u5e03\u5c14\u503c&#xff0c;\u5b83\u540c\u65f6\u4ea7\u751f\u5224\u5b9a\u8bc1\u660e&#xff1a;<\/p>\n<p>ALLOW(<br \/>\n  candidate      &#061; H(CAND-042-01),<br \/>\n  intent         &#061; H(INT-2027-0042),<br \/>\n  policy         &#061; H(POLICY-MAINTENANCE-V1),<br \/>\n  constitution   &#061; V1,<br \/>\n  evidence_set   &#061; H(EVIDENCE-SET-02),<br \/>\n  runtime        &#061; V1.0,<br \/>\n  evaluated_at   &#061; 10:01:05,<br \/>\n  decision_proof &#061; H(PROOF-042-02)<br \/>\n)<\/p>\n<h3>A.7 \u786c\u4ef6\u8fb9\u754c\u4e0e\u6267\u884c<\/h3>\n<p>\u5224\u5b9a\u8bc1\u660e\u968f\u5019\u9009\u6267\u884c\u8fdb\u5165\u72ec\u7acb\u786c\u4ef6\u8fb9\u754c\u3002\u8fb9\u754c\u4e0d\u63a5\u53d7\u6765\u81ea\u4e0a\u5c42\u7684 allow &#061; true \u65ad\u8a00\u2014\u2014\u4f9d\u636e\u516c\u7406 A7&#xff0c;\u4e0a\u5c42\u63d0\u4ea4\u7684\u662f\u8bc1\u636e\u800c\u975e\u7ed3\u8bba\u3002\u8fb9\u754c\u81f3\u5c11\u72ec\u7acb\u9a8c\u8bc1&#xff1a;Runtime \u8eab\u4efd\u3001\u7b56\u7565\u54c8\u5e0c\u3001\u5019\u9009\u5bf9\u8c61\u54c8\u5e0c\u3001\u610f\u56fe\u7ed1\u5b9a\u3001\u8bc1\u660e\u5b8c\u6574\u6027\u3001\u9632\u91cd\u653e\u8ba1\u6570\u5668\u3001\u5f53\u524d\u8bbe\u5907\u72b6\u6001\u3001\u4ee5\u53ca\u56fa\u5316\u4e8e\u8fb9\u754c\u5185\u7684\u786c\u6027\u9650\u5236\u3002<\/p>\n<p>\u5168\u90e8\u6210\u7acb\u540e&#xff0c;\u8fb9\u754c\u91ca\u653e\u4e00\u6b21\u53d7\u9650\u6267\u884c\u80fd\u529b&#xff0c;\u547d\u4ee4\u9001\u8fbe\u6267\u884c\u6a21\u5757&#xff1a;<\/p>\n<p>DEVICE-042 \u2502 ENTER_MAINTENANCE_MODE \u2502 MAIN_DRIVE_STOP<\/p>\n<p>\u786c\u4ef6\u8bb0\u5f55\u7ed3\u679c\u5e76\u751f\u6210\u8bbe\u5907\u7b7e\u540d\u8bc1\u636e&#xff0c;\u5b8c\u6574\u8bc1\u636e\u94fe\u95ed\u5408&#xff1a;<\/p>\n<p>Intent \u2192 Candidate Execution \u2192 Policy \u2192 Approval \u2192 Evidence Set<br \/>\n       \u2192 Runtime Decision Proof \u2192 Hardware Release \u2192 Execution Result Evidence<\/p>\n<h3>A.8 \u6848\u4f8b\u7ed3\u8bba<\/h3>\n<p>\u7b2c\u4e00\u6b21\u63d0\u4ea4\u6ca1\u6709\u906d\u9047\u653b\u51fb&#xff0c;AI \u6ca1\u6709\u51fa\u9519&#xff0c;\u5ba1\u6279\u6210\u5458\u6ca1\u6709\u4f5c\u6076\u3002\u7cfb\u7edf\u53ea\u662f\u6301\u6709\u4e86\u4e00\u4efd\u8fc7\u671f\u56db\u5341\u4e03\u79d2\u7684\u72b6\u6001\u8bc1\u636e\u3002\u5728\u4f20\u7edf\u81ea\u52a8\u5316\u8bbe\u8ba1\u4e2d&#xff0c;\u8fd9\u7c7b\u60c5\u5f62\u901a\u5e38\u7531\u7f13\u5b58\u6216\u9ed8\u8ba4\u503c\u6d88\u89e3&#xff0c;\u6267\u884c\u7167\u5e38\u53d1\u751f&#xff1b;\u800c\u5728\u672c\u4e66\u7684\u6846\u67b6\u4e0b&#xff0c;\u8fc7\u671f\u610f\u5473\u7740\u7cfb\u7edf\u65e0\u6cd5\u8bc1\u660e\u5f53\u524d\u4e8b\u5b9e\u4ecd\u7136\u6210\u7acb&#xff0c;\u56e0\u800c\u4e0d\u6784\u6210\u653e\u884c\u4f9d\u636e\u3002<\/p>\n<p>\u6848\u4f8b\u8986\u76d6\u7684\u7ed3\u8bba\u5bf9\u5e94\u5982\u4e0b&#xff1a;<\/p>\n<table>\n<tr>\u6848\u4f8b\u73af\u8282\u5bf9\u5e94\u7ed3\u8bba<\/tr>\n<tbody>\n<tr>\n<td>\u81ea\u7136\u8bed\u8a00\u610f\u56fe\u56fa\u5316\u4e3a\u610f\u56fe\u5bf9\u8c61<\/td>\n<td>A1\u3001D2.2.1<\/td>\n<\/tr>\n<tr>\n<td>AI \u53ea\u751f\u6210\u5019\u9009\u6267\u884c&#xff0c;\u4e0d\u6301\u6709\u653e\u884c\u6743<\/td>\n<td>A2\u3001A6<\/td>\n<\/tr>\n<tr>\n<td>\u5ba1\u6279\u7ed1\u5b9a hash(x) \u800c\u975e\u4e1a\u52a1\u63cf\u8ff0<\/td>\n<td>A3<\/td>\n<\/tr>\n<tr>\n<td>\u4e24\u540d\u5ba1\u6279\u8005\u7684\u72ec\u7acb\u6027\u7531\u4fe1\u4efb\u57df\u800c\u975e\u6570\u91cf\u8bc1\u6210<\/td>\n<td>P2.5<\/td>\n<\/tr>\n<tr>\n<td>\u8fc7\u671f\u8bc1\u636e\u4e0d\u8f6c\u4e3a\u771f<\/td>\n<td>A8<\/td>\n<\/tr>\n<tr>\n<td>\u62d2\u7edd\u65f6\u8fd4\u56de\u5931\u8d25\u8bed\u4e49\u4e0e\u5931\u6548\u4f4d\u7f6e<\/td>\n<td>P3.3\u3001P4.3<\/td>\n<\/tr>\n<tr>\n<td>\u5931\u8d25\u8bb0\u5f55\u88ab\u4fdd\u7559<\/td>\n<td>3.3.2<\/td>\n<\/tr>\n<tr>\n<td>\u7ba1\u7406\u5458\u4e0d\u80fd\u4e34\u65f6\u653e\u5bbd\u6709\u6548\u671f<\/td>\n<td>A4\u3001C10<\/td>\n<\/tr>\n<tr>\n<td>\u786c\u4ef6\u72ec\u7acb\u9a8c\u8bc1\u800c\u4e0d\u91c7\u4fe1\u4e0a\u5c42\u7ed3\u8bba<\/td>\n<td>A7\u3001A10<\/td>\n<\/tr>\n<tr>\n<td>ALLOW \u9644\u5e26\u53ef\u91cd\u653e\u8bc1\u660e<\/td>\n<td>A8\u3001C5<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<hr \/>\n<h2>\u9644\u5f55 B\u3000\u53c2\u8003\u67b6\u6784\u4e0e\u786c\u4ef6\u8fb9\u754c<\/h2>\n<\/p>\n<h3>B.1 \u5206\u5c42\u53c2\u8003\u67b6\u6784<\/h3>\n<p>\u6267\u884c\u63a7\u5236\u4e0d\u8981\u6c42\u6240\u6709\u7cfb\u7edf\u91c7\u7528\u76f8\u540c\u786c\u4ef6&#xff0c;\u4f46\u8981\u6c42\u660e\u786e\u533a\u5206\u7406\u89e3\u3001\u534f\u8c03\u3001\u88c1\u51b3\u4e0e\u6267\u884c\u56db\u7c7b\u80fd\u529b&#xff0c;\u5e76\u4f7f\u5b83\u4eec\u5206\u5c5e\u4e0d\u540c\u4fe1\u4efb\u57df&#xff08;A6&#xff09;\u3002<\/p>\n<p>\u56fe B-1\u3000\u6267\u884c\u8fb9\u754c\u7684\u5206\u5c42\u53c2\u8003\u67b6\u6784<\/p>\n<p>\u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510<br \/>\n\u2502 AI Application \/ Agent       \u2502  \u7406\u89e3\u76ee\u6807\u3001\u751f\u6210\u5019\u9009\u6267\u884c<br \/>\n\u2502 Intent Generation            \u2502<br \/>\n\u2502 Candidate Planning           \u2502<br \/>\n\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u252c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518<br \/>\n               \u2502<br \/>\n\u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u25bc\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510<br \/>\n\u2502 Bletchley SaaS               \u2502  \u534f\u540c\u6cbb\u7406&#xff1a;\u5ba1\u6279\u3001\u7b56\u7565\u3001\u8bc1\u636e\u6536\u96c6<br \/>\n\u2502 Workflow Coordination        \u2502<br \/>\n\u2502 Approval \/ Policy \/ Evidence \u2502<br \/>\n\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u252c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518<br \/>\n               \u2502 mTLS \/ gRPC<br \/>\n\u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u25bc\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510<br \/>\n\u2502 Linux Coordination Domain    \u2502  \u7f51\u7edc\u3001\u754c\u9762\u3001\u6570\u636e\u7ec4\u7ec7<br \/>\n\u2502 Network \/ UI \/ Data Exchange \u2502  \u5bf9 Final Veto \u800c\u8a00\u4e0d\u53ef\u4fe1<br \/>\n\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u252c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518<br \/>\n               \u2502 Authenticated Channel<br \/>\n\u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u25bc\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510<br \/>\n\u2502 Arbiter Domain               \u2502  \u72ec\u7acb MCU<br \/>\n\u2502 Independent MCU              \u2502  EBL Runtime\u3001\u7b56\u7565\u6c42\u503c<br \/>\n\u2502 EBL Runtime \/ Policy Check   \u2502  \u8bc1\u636e\u4e0e\u8bc1\u660e\u94fe\u9a8c\u8bc1<br \/>\n\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u252c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518<br \/>\n               \u2502 Restricted Protocol<br \/>\n\u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u25bc\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510<br \/>\n\u2502 Security Execution Domain    \u2502  \u72ec\u7acb MCU<br \/>\n\u2502 Final Payload Verification   \u2502  \u6700\u7ec8\u5bf9\u8c61\u6821\u9a8c\u3001\u9632\u91cd\u653e\u3001Safe Mode<br \/>\n\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u252c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518<br \/>\n               \u2502<br \/>\n\u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u25bc\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510<br \/>\n\u2502 Secure Element \/ Capability  \u2502  cap \u72ec\u5360&#xff1a;\u5bc6\u94a5\u91ca\u653e\u3001\u8bbe\u5907\u52a8\u4f5c<br \/>\n\u2502 Final Execution Evidence     \u2502<br \/>\n\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518<\/p>\n<p>\u56fe\u4e2d\u7684\u91cd\u70b9\u4e0d\u662f\u5668\u4ef6\u9009\u578b&#xff0c;\u800c\u662f\u4fe1\u4efb\u5173\u7cfb\u3002\u4e0a\u5c42\u7684 AI \u4e0e SaaS \u53ef\u4ee5\u7406\u89e3\u4e1a\u52a1\u3001\u534f\u8c03\u5ba1\u6279\u3001\u6536\u96c6\u8bc1\u636e\u5e76\u751f\u6210\u5019\u9009\u6267\u884c&#xff0c;\u4f46\u4e0d\u80fd\u76f4\u63a5\u83b7\u5f97\u6700\u7ec8\u6267\u884c\u80fd\u529b&#xff1b;Linux \u57df\u627f\u62c5\u7f51\u7edc\u3001\u754c\u9762\u4e0e\u6570\u636e\u7ec4\u7ec7&#xff0c;\u4f46\u4e0d\u88ab\u89c6\u4e3a\u6700\u7ec8\u88c1\u51b3\u8005&#xff1b;Arbiter \u57df\u627f\u62c5\u89c4\u5219\u6c42\u503c\u4e0e\u8bc1\u660e\u9a8c\u8bc1&#xff1b;Security \u57df\u627f\u62c5\u6700\u7ec8\u5bf9\u8c61\u6821\u9a8c\u3001\u9632\u91cd\u653e\u4e0e\u80fd\u529b\u91ca\u653e\u3002\u5224\u636e\u4ecd\u662f 2.4.3 \u7684\u90a3\u4e00\u6761&#xff1a;\u4efb\u4f55\u5355\u4e00\u4e0a\u5c42\u7ec4\u4ef6\u88ab\u653b\u9677&#xff0c;\u90fd\u4e0d\u5e94\u76f4\u63a5\u4ea7\u751f\u73b0\u5b9e\u6267\u884c\u3002<\/p>\n<p>\u5b9e\u73b0\u6ce8\u8bb0\u3002 \u4e0a\u8ff0\u5404\u57df\u5728\u53c2\u8003\u5b9e\u73b0\u4e2d\u5206\u522b\u5bf9\u5e94\u901a\u7528\u5e94\u7528\u5904\u7406\u5668\u3001\u72ec\u7acb\u5fae\u63a7\u5236\u5668\u4e0e\u5b89\u5168\u5143\u4ef6\u7b49\u5668\u4ef6\u7c7b\u522b\u3002\u5177\u4f53\u578b\u53f7\u5c5e\u4e8e\u5b9e\u73b0\u9009\u62e9\u800c\u975e\u67b6\u6784\u8981\u6c42&#xff0c;\u672c\u4e66\u4e0d\u5217\u51fa&#xff1b;\u66ff\u6362\u5668\u4ef6\u4e0d\u6539\u53d8\u67b6\u6784\u6210\u7acb\u4e0e\u5426&#xff0c;\u6539\u53d8\u4fe1\u4efb\u57df\u5212\u5206\u5219\u4f1a\u3002<\/p>\n<\/p>\n<h3>B.2 TEE \u4e0e\u72ec\u7acb MCU<\/h3>\n<p>\u53ef\u4fe1\u6267\u884c\u73af\u5883\u80fd\u591f\u9694\u79bb\u654f\u611f\u4ee3\u7801&#xff0c;\u964d\u4f4e\u901a\u7528\u64cd\u4f5c\u7cfb\u7edf\u88ab\u653b\u9677\u540e\u7684\u98ce\u9669&#xff0c;\u662f\u4e00\u79cd\u6709\u6548\u7684\u5b9e\u73b0\u624b\u6bb5\u3002\u4f46 TEE \u901a\u5e38\u4e0e\u4e3b\u5904\u7406\u5668\u5171\u4eab\u542f\u52a8\u94fe\u3001\u66f4\u65b0\u8def\u5f84\u3001\u7535\u6e90\u4e0e\u65f6\u949f\u3001\u82af\u7247\u4f9b\u5e94\u94fe\u3001\u90e8\u5206\u5916\u8bbe\u53ca\u7ba1\u7406\u6743\u9650\u2014\u2014\u8fd9\u4e9b\u5171\u4eab\u9879\u6784\u6210\u5171\u56e0\u5931\u6548\u8def\u5f84&#xff08;2.4.5&#xff09;&#xff0c;\u4f7f A6 \u6240\u8981\u6c42\u7684\u72ec\u7acb\u6027\u5728\u6545\u969c\u57df\u4e0a\u4e0d\u5b8c\u5168\u6210\u7acb\u3002<\/p>\n<p>\u56e0\u6b64\u672c\u4e66\u5c06 TEE \u5b9a\u4f4d\u4e3a\u53ef\u9009\u5b9e\u73b0\u800c\u975e\u6838\u5fc3\u673a\u5236\u3002\u5bf9\u9ad8\u98ce\u9669\u7cfb\u7edf&#xff0c;\u91c7\u7528\u72ec\u7acb MCU \u6216\u72ec\u7acb\u5b89\u5168\u63a7\u5236\u5668&#xff0c;\u5c06 Final Veto \u4ece\u901a\u7528\u64cd\u4f5c\u7cfb\u7edf\u4e2d\u7269\u7406\u5206\u79bb&#xff0c;\u5176\u4ef7\u503c\u4e0d\u5728\u4e8e\u8ba1\u7b97\u66f4\u5b89\u5168&#xff0c;\u800c\u5728\u4e8e&#xff1a;\u4e0a\u5c42\u7cfb\u7edf\u65e0\u6cd5\u901a\u8fc7\u666e\u901a\u8f6f\u4ef6\u8c03\u7528\u7ed5\u8fc7\u5b83&#xff08;A10&#xff09;\u3002<\/p>\n<\/p>\n<h3>B.3 \u5e26\u5916\u786e\u8ba4\u4e0e\u663e\u793a\u7ed1\u5b9a<\/h3>\n<p>\u90e8\u5206\u9ad8\u98ce\u9669\u6267\u884c\u9700\u8981\u672c\u5730\u6216\u5e26\u5916\u786e\u8ba4\u3002\u6b64\u7c7b\u786e\u8ba4\u82e5\u4ec5\u5c55\u793a\u62bd\u8c61\u63cf\u8ff0&#xff08;\u5982&#034;\u662f\u5426\u6279\u51c6\u8be5\u64cd\u4f5c&#034;&#xff09;&#xff0c;\u5219\u786e\u8ba4\u8005\u6240\u540c\u610f\u7684\u662f\u4e00\u6bb5\u63cf\u8ff0\u800c\u975e\u6700\u7ec8\u5bf9\u8c61&#xff0c;\u8fdd\u53cd A3\u3002<\/p>\n<p>\u6709\u6548\u7684\u5e26\u5916\u786e\u8ba4\u987b\u5c55\u793a\u6700\u7ec8\u6267\u884c\u5bf9\u8c61\u7684\u5173\u952e\u5b57\u6bb5&#xff1a;\u76ee\u6807\u5bf9\u8c61\u3001\u52a8\u4f5c\u7c7b\u578b\u3001\u63a7\u5236\u53c2\u6570\u6216\u91d1\u989d\u3001\u610f\u56fe\u6807\u8bc6\u3001\u98ce\u9669\u7ea7\u522b\u3001\u6709\u6548\u65f6\u95f4\u3001\u6700\u7ec8\u5bf9\u8c61\u6458\u8981\u3002\u5176\u771f\u6b63\u4f5c\u7528\u4e0d\u662f\u589e\u52a0\u4e00\u4e2a\u6309\u94ae&#xff0c;\u800c\u662f\u5efa\u7acb\u4e00\u6761\u72ec\u7acb\u4e8e\u4e0a\u5c42\u754c\u9762\u7684\u663e\u793a\u7ed1\u5b9a\u2014\u2014\u5f53\u4e0a\u5c42 UI \u88ab\u7be1\u6539\u65f6&#xff0c;\u8fb9\u754c\u4ecd\u80fd\u5c55\u793a\u5b83\u5b9e\u9645\u51c6\u5907\u653e\u884c\u7684\u5bf9\u8c61\u3002<\/p>\n<\/p>\n<h3>B.4 \u56fa\u4ef6\u9501\u4e0e\u5e95\u7ebf\u56fa\u5316<\/h3>\n<p>\u82e5\u786c\u4ef6\u8fb9\u754c\u53ef\u88ab\u666e\u901a\u7ba1\u7406\u5458\u968f\u65f6\u91cd\u65b0\u914d\u7f6e&#xff0c;\u5219\u5b83\u4e0d\u6784\u6210\u7a33\u5b9a\u7684 Final Veto\u3002\u53c2\u8003\u67b6\u6784\u56e0\u6b64\u987b\u5305\u542b&#xff1a;\u5b89\u5168\u542f\u52a8\u3001\u56fa\u4ef6\u7b7e\u540d\u3001\u9632\u56de\u6eda\u3001\u8c03\u8bd5\u7aef\u53e3\u9501\u5b9a\u3001\u8bfb\u51fa\u4fdd\u62a4\u3001\u56fa\u5b9a\u5b89\u5168\u53c2\u6570\u3001\u53d7\u63a7\u5347\u7ea7\u6d41\u7a0b\u3001\u8bbe\u5907\u8eab\u4efd\u4e0e\u56fa\u4ef6\u6d4b\u91cf\u8bc1\u636e\u3002<\/p>\n<p>\u5e76\u975e\u6240\u6709\u89c4\u5219\u90fd\u9700\u56fa\u5316\u3002\u4e1a\u52a1\u7b56\u7565 P \u5e94\u5f53\u53ef\u66f4\u65b0&#xff0c;\u5baa\u6cd5 K \u6240\u89c4\u5b9a\u7684\u56fa\u5b9a\u5e95\u7ebf\u4e0d\u5e94\u901a\u8fc7\u5e38\u89c4\u8fdc\u7a0b\u914d\u7f6e\u5173\u95ed&#xff08;A4\u3001E2.4&#xff09;\u3002\u53ef\u53d8\u5316\u7684\u662f\u4e1a\u52a1\u8303\u56f4&#xff0c;\u4e0d\u5e94\u8f7b\u6613\u53d8\u5316\u7684\u662f&#xff1a;\u4ec0\u4e48\u60c5\u51b5\u4e0b\u7cfb\u7edf\u6c38\u8fdc\u4e0d\u4ea7\u751f ALLOW\u3002<\/p>\n<\/p>\n<h3>B.5 \u8fb9\u754c\u4e0d\u662f\u5355\u4e2a\u82af\u7247<\/h3>\n<p>\u7269\u7406\u4fe1\u4efb\u8fb9\u754c\u4e0d\u7b49\u4e8e\u67d0\u4e00\u9897\u5b89\u5168\u82af\u7247\u3002\u5b83\u662f\u4e00\u7ec4\u987b\u540c\u65f6\u6210\u7acb\u7684\u5173\u7cfb&#xff1a;\u5bc6\u94a5\u6216\u6267\u884c\u80fd\u529b\u4e0d\u53ef\u88ab\u4e0a\u5c42\u76f4\u63a5\u53d6\u5f97&#xff1b;\u6700\u7ec8\u5bf9\u8c61\u5728\u8fb9\u754c\u5185\u91cd\u65b0\u9a8c\u8bc1&#xff1b;Runtime \u7ed3\u679c\u53ef\u88ab\u72ec\u7acb\u9a8c\u8bc1&#xff1b;\u8bc1\u636e\u4e0e\u5019\u9009\u5bf9\u8c61\u5b8c\u6210\u7ed1\u5b9a&#xff1b;\u5931\u8d25\u65f6\u9ed8\u8ba4\u62d2\u7edd&#xff1b;\u56fa\u4ef6\u4e0e\u8bbe\u5907\u8eab\u4efd\u53ef\u8bc1\u660e&#xff1b;\u6267\u884c\u7ed3\u679c\u7559\u4e0b\u8bbe\u5907\u8bc1\u636e\u3002<\/p>\n<p>\u56e0\u6b64\u5de5\u7a0b\u4e0a\u9700\u8981\u8bbe\u8ba1\u7684\u4e0d\u662f&#034;\u6700\u5b89\u5168\u7684\u82af\u7247&#034;&#xff0c;\u800c\u662f&#xff1a;\u4ece\u4e0a\u5c42\u610f\u56fe\u5230\u6700\u7ec8\u80fd\u529b\u91ca\u653e\u4e4b\u95f4&#xff0c;\u662f\u5426\u5b58\u5728\u4e00\u6761\u4e0d\u53ef\u7ed5\u8fc7\u7684\u63a7\u5236\u94fe\u3002\u8fd9\u4e00\u95ee\u9898\u7684\u7b54\u6848\u7531\u67b6\u6784\u7ed9\u51fa&#xff0c;\u4e0d\u7531\u5668\u4ef6\u7ed9\u51fa\u3002<\/p>\n<hr \/>\n<h2>\u9644\u5f55 C\u3000\u516c\u7406\u7d22\u5f15\u30fb\u5b9a\u4e49\u7d22\u5f15\u30fb\u5931\u8d25\u77e9\u9635<\/h2>\n<\/p>\n<h3>C.1 \u516c\u7406\u7d22\u5f15<\/h3>\n<p>\u8868 C-1\u3000\u516c\u7406\u901f\u67e5<\/p>\n<table>\n<tr>\u7f16\u53f7\u901f\u8bb0\u5f62\u5f0f\u5b8c\u6574\u8868\u8ff0\u89c1<\/tr>\n<tbody>\n<tr>\n<td>A1<\/td>\n<td>\u65e0\u53ef\u9a8c\u8bc1\u610f\u56fe&#xff0c;\u5219\u65e0\u88c1\u51b3<\/td>\n<td>\u00a72.6<\/td>\n<\/tr>\n<tr>\n<td>A2<\/td>\n<td>Intent \u2260 Execution<\/td>\n<td>\u00a72.6\u3001\u00a72.2<\/td>\n<\/tr>\n<tr>\n<td>A3<\/td>\n<td>Approval \u7ed1\u5b9a\u5bf9\u8c61&#xff0c;\u800c\u975e\u63cf\u8ff0<\/td>\n<td>\u00a72.6\u3001\u00a72.3<\/td>\n<\/tr>\n<tr>\n<td>A4<\/td>\n<td>Owner \u2260 God&#xff1a;Policy \u4e0d\u80fd\u5173\u95ed Constitution<\/td>\n<td>\u00a72.6\u3001\u00a74.3<\/td>\n<\/tr>\n<tr>\n<td>A5<\/td>\n<td>\u65e0\u5426\u51b3\u80fd\u529b&#xff0c;\u5219\u65e0\u8fb9\u754c<\/td>\n<td>\u00a72.6\u3001\u00a72.3<\/td>\n<\/tr>\n<tr>\n<td>A6<\/td>\n<td>\u751f\u6210\u65b9 \u2260 \u88c1\u51b3\u65b9<\/td>\n<td>\u00a72.6\u3001\u00a74.4<\/td>\n<\/tr>\n<tr>\n<td>A7<\/td>\n<td>\u6765\u6e90\u53ef\u4fe1 \u2260 \u4e8b\u5b9e\u53ef\u8bc1<\/td>\n<td>\u00a72.6\u3001\u00a72.5<\/td>\n<\/tr>\n<tr>\n<td>A8<\/td>\n<td>\u65e0\u5b8c\u6574\u8bc1\u660e&#xff0c;\u5219\u65e0 ALLOW<\/td>\n<td>\u00a72.6\u3001\u00a73.3<\/td>\n<\/tr>\n<tr>\n<td>A9<\/td>\n<td>\u5bf9\u8c61\u6216\u72b6\u6001\u53d8\u5316&#xff0c;\u8bc1\u660e\u5373\u5931\u6548<\/td>\n<td>\u00a72.6<\/td>\n<\/tr>\n<tr>\n<td>A10<\/td>\n<td>\u65e0\u8fb9\u754c\u653e\u884c&#xff0c;\u73b0\u5b9e\u52a8\u4f5c\u4e0d\u53ef\u53d1\u751f<\/td>\n<td>\u00a72.6\u3001\u00a72.4<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u5e38\u88ab\u5f15\u7528\u7684\u6d3e\u751f\u547d\u9898&#xff1a;Signing \u2260 Final Veto&#xff08;P2.3&#xff09;&#xff1b;\u5bc6\u94a5\u4fdd\u62a4 \u2260 \u6267\u884c\u4fdd\u62a4&#xff08;P2.3&#xff09;&#xff1b;\u8ba1\u6570 \u2260 \u72ec\u7acb\u6027&#xff08;P2.5&#xff09;&#xff1b;\u5c40\u90e8\u6b63\u786e \u2260 \u6574\u4f53\u6b63\u786e&#xff08;P1.1&#xff09;\u3002<\/p>\n<\/p>\n<h3>C.2 \u5b9a\u4e49\u7d22\u5f15<\/h3>\n<table>\n<tr>\u672f\u8bed\u7f16\u53f7\u4e00\u53e5\u8bdd\u5b9a\u4e49<\/tr>\n<tbody>\n<tr>\n<td>Execution Gap<\/td>\n<td>D1.3.1<\/td>\n<td>\u610f\u56fe\u81f3\u73b0\u5b9e\u7ed3\u679c\u4e4b\u95f4\u7f3a\u4e4f\u7aef\u5230\u7aef\u6267\u884c\u7ea6\u675f\u7684\u7ed3\u6784\u6027\u7a7a\u95f4<\/td>\n<\/tr>\n<tr>\n<td>Execution Control<\/td>\n<td>D2.1.1<\/td>\n<td>\u52a8\u4f5c\u53d1\u751f\u524d\u5bf9\u5bf9\u8c61\u3001\u6761\u4ef6\u3001\u8bc1\u636e\u53ca\u5176\u7ed1\u5b9a\u8fdb\u884c\u72ec\u7acb\u88c1\u51b3\u7684\u673a\u5236<\/td>\n<\/tr>\n<tr>\n<td>Intent Object<\/td>\n<td>D2.2.1<\/td>\n<td>\u643a\u5e26\u4e0d\u53ef\u53d8\u7ea6\u675f I.inv \u7684\u53ef\u9a8c\u8bc1\u610f\u56fe\u7ed3\u6784<\/td>\n<\/tr>\n<tr>\n<td>Intent Binding<\/td>\n<td>D2.2.2<\/td>\n<td>\u5019\u9009\u6267\u884c\u4e0e\u610f\u56fe\u5728 I.inv \u6bcf\u4e00\u9879\u4e0a\u4e00\u81f4\u7684\u53ef\u9a8c\u8bc1\u5173\u7cfb<\/td>\n<\/tr>\n<tr>\n<td>Final Veto<\/td>\n<td>D2.3.1<\/td>\n<td>\u80fd\u529b\u91ca\u653e\u524d\u4e0d\u53ef\u7ed5\u8fc7\u3001\u4e0d\u53ef\u8986\u76d6\u7684\u62d2\u7edd\u80fd\u529b<\/td>\n<\/tr>\n<tr>\n<td>Physical Trust Boundary<\/td>\n<td>D2.4.1<\/td>\n<td>\u7531\u72ec\u7acb\u786c\u4ef6\u57df\u72ec\u5360\u5fc5\u8981\u80fd\u529b\u6240\u6784\u6210\u7684\u6267\u884c\u8fb9\u754c<\/td>\n<\/tr>\n<tr>\n<td>Evidence<\/td>\n<td>D2.5.1<\/td>\n<td>\u643a\u5e26\u7c7b\u578b\u3001\u6765\u6e90\u3001\u4e3b\u4f53\u7ed1\u5b9a\u4e0e\u65f6\u95f4\u8bed\u4e49\u7684\u53ef\u9a8c\u8bc1\u4e8b\u5b9e<\/td>\n<\/tr>\n<tr>\n<td>Adversarial Completeness<\/td>\n<td>D3.1.1<\/td>\n<td>\u5728\u58f0\u660e\u7684\u5a01\u80c1\u4e0e\u6545\u969c\u6a21\u578b\u4e0b\u5173\u952e\u7ea6\u675f\u4ecd\u6210\u7acb\u7684\u6027\u8d28<\/td>\n<\/tr>\n<tr>\n<td>Execution Boundary<\/td>\n<td>D4.2.1<\/td>\n<td>\u89c4\u5219\u4e0e cap \u72ec\u5360\u5171\u540c\u6784\u6210\u7684\u5355\u5411\u63a7\u5236\u70b9<\/td>\n<\/tr>\n<tr>\n<td>Constitution<\/td>\n<td>D4.3.1<\/td>\n<td>\u4e0d\u53ef\u7531 P \u5173\u95ed\u3001\u5e76\u51b3\u5b9a\u8bed\u8a00\u80fd\u529b\u8fb9\u754c\u7684\u89c4\u5219\u96c6\u5408<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>C.3 \u5931\u8d25\u77e9\u9635<\/h3>\n<p>\u8868 C-2\u3000\u8bc1\u636e\u72b6\u6001\u4e0e\u6761\u4ef6\u6c42\u503c\u7ed3\u679c<\/p>\n<table>\n<tr>\u72b6\u6001\u542b\u4e49\u53ef\u5426\u6ee1\u8db3\u5fc5\u8981\u6761\u4ef6\u6062\u590d\u52a8\u4f5c<\/tr>\n<tbody>\n<tr>\n<td>VALID<\/td>\n<td>\u5df2\u9a8c\u8bc1\u4e14\u5728\u6709\u6548\u671f\u5185<\/td>\n<td>\u662f<\/td>\n<td>\u2014<\/td>\n<\/tr>\n<tr>\n<td>UNKNOWN<\/td>\n<td>\u65e0\u6cd5\u5b8c\u6210\u9a8c\u8bc1<\/td>\n<td>\u5426<\/td>\n<td>\u4fee\u590d\u9a8c\u8bc1\u901a\u9053\u6216\u66f4\u6362\u6765\u6e90<\/td>\n<\/tr>\n<tr>\n<td>MISSING<\/td>\n<td>\u5fc5\u8981\u8bc1\u636e\u672a\u63d0\u4ea4<\/td>\n<td>\u5426<\/td>\n<td>\u8865\u5145\u63d0\u4ea4<\/td>\n<\/tr>\n<tr>\n<td>EXPIRED<\/td>\n<td>\u66fe\u6210\u7acb&#xff0c;\u5df2\u8d85\u51fa\u6709\u6548\u671f<\/td>\n<td>\u5426<\/td>\n<td>\u91cd\u65b0\u91c7\u96c6\u6216\u7b7e\u53d1<\/td>\n<\/tr>\n<tr>\n<td>CONFLICT<\/td>\n<td>\u5b58\u5728\u77db\u76fe\u7684\u540c\u7c7b\u8bc1\u636e<\/td>\n<td>\u5426<\/td>\n<td>\u72ec\u7acb\u88c1\u5b9a&#xff0c;\u8fdb\u5165 SAFE_MODE<\/td>\n<\/tr>\n<tr>\n<td>FALSE<\/td>\n<td>\u6761\u4ef6\u7531\u6709\u6548\u8bc1\u636e\u8bc1\u660e\u4e3a\u4e0d\u6210\u7acb<\/td>\n<td>\u5426<\/td>\n<td>\u53d8\u66f4\u5019\u9009\u6267\u884c\u6216\u610f\u56fe<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>FALSE \u4e0e\u5176\u4f59\u56db\u79cd\u975e\u653e\u884c\u72b6\u6001\u7684\u533a\u522b\u662f\u5b9e\u8d28\u6027\u7684&#xff1a;FALSE \u8868\u793a\u7cfb\u7edf\u5df2\u5b8c\u6210\u8bc1\u660e\u4e14\u7ed3\u8bba\u4e3a\u62d2\u7edd&#xff0c;\u5176\u4f59\u56db\u79cd\u8868\u793a\u7cfb\u7edf\u65e0\u6cd5\u5b8c\u6210\u8bc1\u660e\u3002\u524d\u8005\u7684\u6062\u590d\u9014\u5f84\u662f\u4fee\u6539\u8bf7\u6c42&#xff0c;\u540e\u8005\u7684\u6062\u590d\u9014\u5f84\u662f\u4fee\u590d\u8bc1\u636e\u3002<\/p>\n<p>\u3014\u8865\u3015\u5173\u4e8e\u9a8c\u8bc1\u5931\u8d25\u7684\u5f52\u7c7b\u3002 \u4e00\u4efd\u7b7e\u540d\u4e0d\u5339\u914d\u6216\u6765\u6e90\u51ed\u636e\u65e0\u6548\u7684\u8bc1\u636e&#xff0c;\u5728\u653e\u884c\u5224\u5b9a\u4e0a\u4e0e UNKNOWN \u7b49\u4ef7\u2014\u2014\u4e24\u8005\u5747\u4e0d\u53c2\u4e0e \u03c0\u3002\u4f46\u5728\u544a\u8b66\u8bed\u4e49\u4e0a\u4e8c\u8005\u5e94\u4e88\u533a\u5206&#xff1a;\u9a8c\u8bc1\u5931\u8d25\u901a\u5e38\u662f\u653b\u51fb\u6307\u793a\u5668&#xff08;\u5a01\u80c1\u7c7b X4&#xff09;&#xff0c;\u800c\u65e0\u6cd5\u9a8c\u8bc1\u901a\u5e38\u662f\u901a\u9053\u6545\u969c&#xff08;X8&#xff09;\u3002\u672c\u4e66\u5c06\u5176\u5728 \u03c3(e) \u4e2d\u5f52\u5165 UNKNOWN \u4ee5\u4fdd\u6301\u56db\u6001\u7684\u6700\u5c0f\u6027&#xff0c;\u540c\u65f6\u5efa\u8bae\u5b9e\u73b0\u5728\u8bc1\u660e\u4e2d\u4fdd\u7559 verification_failed \u6807\u8bb0\u4f9b\u76d1\u6d4b\u4f7f\u7528\u3002<\/p>\n<hr \/>\n<p>\u5168\u4e66\u7ed3\u8bba \u6ca1\u6709\u5b8c\u6574\u8bc1\u660e&#xff0c;\u5c31\u6ca1\u6709 ALLOW\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>AI \u6267\u884c\u5de5\u7a0b\u8bba\u7eb2<br \/>\nTheses on AI Execution Engineering \u7248\u672c 1.0\u3000&#xff5c;\u30002026 \u5e74 7 \u6708\u3000&#xff5c;\u3000Havenlon Labs\u3000&#xff5c;\u3000\u6210\u90fd\u6d77\u6587\u9686\u5b89\u5168\u79d1\u6280\u6709\u9650\u516c\u53f8 \u672c\u4e66\u63d0\u51fa\u4e00\u95e8\u5c1a\u672a\u6210\u7acb\u7684\u5de5\u7a0b\u5b66\u7684\u5341\u6761\u516c\u7406\u3001\u82e5\u5e72\u5b9a\u4e49\u4e0e\u547d\u9898\u3002 \u8fd9\u4e9b\u7406\u8bba\u5e76\u975e\u6765\u81ea\u7eaf\u7cb9\u62bd\u8c61\u63a8\u6f14&#xff0c;\u800c\u662f\u4ece\u8fd1\u4e24\u5e74\u7684\u8f6f\u4ef6\u3001\u534f\u8bae\u3001Runtime\u3001Evidence \u4e0e\u786c\u4ef6\u8fb9\u754c\u5b9e\u8df5\u4e2d\u9010\u6b65\u603b\u7ed3\u51fa\u6765\u7684\u3002 \u5b83\u9762\u5411\u8bc4\u5224\u800c\u975e\u63a5\u53d7&#xff1a;\u6307\u51fa\u67d0\u6761\u516c\u7406<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[9530,50,61,1465,427],"topic":[],"class_list":["post-85151","post","type-post","status-publish","format-standard","hentry","category-server","tag-havenlon","tag-50","tag-61","tag-1465","tag-427"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.3 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>\u300aAI \u6267\u884c\u5de5\u7a0b\u8bba\u7eb2\u300b\u5168\u6587\u7248 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.wsisp.com\/helps\/85151.html\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u300aAI \u6267\u884c\u5de5\u7a0b\u8bba\u7eb2\u300b\u5168\u6587\u7248 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"og:description\" content=\"AI \u6267\u884c\u5de5\u7a0b\u8bba\u7eb2 Theses on AI Execution Engineering \u7248\u672c 1.0\u3000&#xff5c;\u30002026 \u5e74 7 \u6708\u3000&#xff5c;\u3000Havenlon Labs\u3000&#xff5c;\u3000\u6210\u90fd\u6d77\u6587\u9686\u5b89\u5168\u79d1\u6280\u6709\u9650\u516c\u53f8 \u672c\u4e66\u63d0\u51fa\u4e00\u95e8\u5c1a\u672a\u6210\u7acb\u7684\u5de5\u7a0b\u5b66\u7684\u5341\u6761\u516c\u7406\u3001\u82e5\u5e72\u5b9a\u4e49\u4e0e\u547d\u9898\u3002 \u8fd9\u4e9b\u7406\u8bba\u5e76\u975e\u6765\u81ea\u7eaf\u7cb9\u62bd\u8c61\u63a8\u6f14&#xff0c;\u800c\u662f\u4ece\u8fd1\u4e24\u5e74\u7684\u8f6f\u4ef6\u3001\u534f\u8bae\u3001Runtime\u3001Evidence \u4e0e\u786c\u4ef6\u8fb9\u754c\u5b9e\u8df5\u4e2d\u9010\u6b65\u603b\u7ed3\u51fa\u6765\u7684\u3002 \u5b83\u9762\u5411\u8bc4\u5224\u800c\u975e\u63a5\u53d7&#xff1a;\u6307\u51fa\u67d0\u6761\u516c\u7406\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.wsisp.com\/helps\/85151.html\" \/>\n<meta property=\"og:site_name\" content=\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-26T17:56:25+00:00\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"42 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/85151.html\",\"url\":\"https:\/\/www.wsisp.com\/helps\/85151.html\",\"name\":\"\u300aAI \u6267\u884c\u5de5\u7a0b\u8bba\u7eb2\u300b\u5168\u6587\u7248 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"isPartOf\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\"},\"datePublished\":\"2026-07-26T17:56:25+00:00\",\"dateModified\":\"2026-07-26T17:56:25+00:00\",\"author\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/85151.html#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.wsisp.com\/helps\/85151.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/85151.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.wsisp.com\/helps\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u300aAI \u6267\u884c\u5de5\u7a0b\u8bba\u7eb2\u300b\u5168\u6587\u7248\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\",\"url\":\"https:\/\/www.wsisp.com\/helps\/\",\"name\":\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"description\":\"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"contentUrl\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"caption\":\"admin\"},\"sameAs\":[\"http:\/\/wp.wsisp.com\"],\"url\":\"https:\/\/www.wsisp.com\/helps\/author\/admin\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\u300aAI \u6267\u884c\u5de5\u7a0b\u8bba\u7eb2\u300b\u5168\u6587\u7248 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.wsisp.com\/helps\/85151.html","og_locale":"zh_CN","og_type":"article","og_title":"\u300aAI \u6267\u884c\u5de5\u7a0b\u8bba\u7eb2\u300b\u5168\u6587\u7248 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","og_description":"AI \u6267\u884c\u5de5\u7a0b\u8bba\u7eb2 Theses on AI Execution Engineering \u7248\u672c 1.0\u3000&#xff5c;\u30002026 \u5e74 7 \u6708\u3000&#xff5c;\u3000Havenlon Labs\u3000&#xff5c;\u3000\u6210\u90fd\u6d77\u6587\u9686\u5b89\u5168\u79d1\u6280\u6709\u9650\u516c\u53f8 \u672c\u4e66\u63d0\u51fa\u4e00\u95e8\u5c1a\u672a\u6210\u7acb\u7684\u5de5\u7a0b\u5b66\u7684\u5341\u6761\u516c\u7406\u3001\u82e5\u5e72\u5b9a\u4e49\u4e0e\u547d\u9898\u3002 \u8fd9\u4e9b\u7406\u8bba\u5e76\u975e\u6765\u81ea\u7eaf\u7cb9\u62bd\u8c61\u63a8\u6f14&#xff0c;\u800c\u662f\u4ece\u8fd1\u4e24\u5e74\u7684\u8f6f\u4ef6\u3001\u534f\u8bae\u3001Runtime\u3001Evidence \u4e0e\u786c\u4ef6\u8fb9\u754c\u5b9e\u8df5\u4e2d\u9010\u6b65\u603b\u7ed3\u51fa\u6765\u7684\u3002 \u5b83\u9762\u5411\u8bc4\u5224\u800c\u975e\u63a5\u53d7&#xff1a;\u6307\u51fa\u67d0\u6761\u516c\u7406","og_url":"https:\/\/www.wsisp.com\/helps\/85151.html","og_site_name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","article_published_time":"2026-07-26T17:56:25+00:00","author":"admin","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"admin","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"42 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.wsisp.com\/helps\/85151.html","url":"https:\/\/www.wsisp.com\/helps\/85151.html","name":"\u300aAI \u6267\u884c\u5de5\u7a0b\u8bba\u7eb2\u300b\u5168\u6587\u7248 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","isPartOf":{"@id":"https:\/\/www.wsisp.com\/helps\/#website"},"datePublished":"2026-07-26T17:56:25+00:00","dateModified":"2026-07-26T17:56:25+00:00","author":{"@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41"},"breadcrumb":{"@id":"https:\/\/www.wsisp.com\/helps\/85151.html#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.wsisp.com\/helps\/85151.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.wsisp.com\/helps\/85151.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.wsisp.com\/helps"},{"@type":"ListItem","position":2,"name":"\u300aAI \u6267\u884c\u5de5\u7a0b\u8bba\u7eb2\u300b\u5168\u6587\u7248"}]},{"@type":"WebSite","@id":"https:\/\/www.wsisp.com\/helps\/#website","url":"https:\/\/www.wsisp.com\/helps\/","name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","description":"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41","name":"admin","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/","url":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","contentUrl":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","caption":"admin"},"sameAs":["http:\/\/wp.wsisp.com"],"url":"https:\/\/www.wsisp.com\/helps\/author\/admin"}]}},"_links":{"self":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/85151","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/comments?post=85151"}],"version-history":[{"count":0,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/85151\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media?parent=85151"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/categories?post=85151"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/tags?post=85151"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/topic?post=85151"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}