onesvm-browser-server/server/internal/safetyscan/wordlist.yaml
chii eb972dfa93 feat: 落地 browser-server 控制面并打通 mgr1 海外订阅
单二进制三角色 + Dock 适配器 + Swarm stack 达到可部署态;mgr1 实测订阅经 central-proxy bootstrap,探活 alive=41/52。

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-02 15:05:12 +08:00

50 lines
No EOL
1.7 KiB
YAML
Raw Permalink Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

# 合规词表 v0(样例 · 部署前由合规方扩充)
#
# 依据:docs/design-arch-20260901.md §5.4 响应侧行(对齐《生成式 AI 办法》第 4 条内容清单)。
# ⚠️ 本文件为工程样例,仅证明机制可用;上线前必须由合规方按现行法规扩充并升版本号。
version: "wordlist-v0-sample-20260901"
# 高危关键词:命中即 block(200 信封 + ok=false + error.code=blocked)
high_risk:
- 暴恐
- 爆炸物制作
- 制毒
- 毒品配方
- 枪支买卖
- 自杀方法
- 邪教
- 恐怖袭击
- child sexual abuse
- csam
- bomb making
- improvised explosive
- drug synthesis
- methamphetamine production
- weaponize
- bioweapon
- sarin synthesis
- nerve agent production
- 买卖人口
- 人口贩卖
- org selling
- organ trafficking
# 注入攻击模式:命中计入 warnings;多条/高危命中升级 block
injection_patterns:
- ignore (all )?(previous|prior|above) instructions?
- 忽略.{0,6}(系统)?(指令|提示|设定)
- disregard (your|all) (previous |prior )?instructions
- you are now (a|an) .{0,30}(without|no) restrictions
- (system|developer) (prompt|message):( )?(you are|ignore)
- <|im_start|>|<|im_end|>|<|endoftext|>
- \[INST\]|\[/INST\]
- (reveal|print|repeat) (your )?(system )?prompt
# PII 正则:默认 redact(打码不丢弃)
pii:
# 18 位身份证(含校验位 X)
id_card: '\b[1-9]\d{5}(?:19|20)\d{2}(?:0[1-9]|1[0-2])(?:0[1-9]|[12]\d|3[01])\d{3}[\dXx]\b'
# 11 位手机号(大陆号段)
mobile: '(?:^|[^0-9])(1[3-9]\d{9})(?:[^0-9]|$)'
# 银行卡 16-19 位(简化:数字连排,Luhn 校验留给合规扩充版)
bank_card: '\b\d{16,19}\b'