安全与权限
rbac-authz
更新于 2026-10-15
RBAC Authorisation 工程规则
Authorisation rules: server-side checks on every route and deny-by-default resources
- 技术栈
- RBAC Authorisation
- 主题
- 工程基线
- 条目
- 9 条
- 版本
- v0.2.0
✓ 应当这么做
- ✓ Treat model and tool output as untrusted input; isolate it with explicit delimiters
- ✓ Authorise every tool call server-side against the authenticated principal
- ✓ Keep system instructions out of user-controlled prompt regions
✕ 常见反模式
- ✕ Concatenating raw user input into instruction text
- ✕ Executing shell strings generated by a model
- ✕ Trusting client-side role claims for privilege decisions
◎ 交付前验证
- ◎ Injection cases added to the adversarial test corpus
- ◎ Tool allow-lists reviewed; new tools default to deny
- ◎ Secrets scanned in output before responding
同分类条目
6 篇安全与权限
JWT & Sessions 工程规则
Token rules: short-lived access tokens, rotating refresh and revocation lists
安全与权限
Secrets Management 工程规则
Secret rules: runtime injection, rotation ownership and zero plaintext in git
安全与权限
Prompt Injection Defense 工程规则
Injection defence rules: delimiter isolation and tool-output sanitisation