正文
获取原文件references/security-policy.md
Threat model
D002 assumes the source package may contain PHI, credentials, malicious prompt text, scripts, malformed files, macro-enabled Office files, symlinks, or misleading schemas.
Hard boundaries
- local-only
- standard-library-only
- source read-only
- no input code execution
- no shell execution
- no remote DB connections
- no arbitrary SQL from input
- no archive expansion except controlled XLSX OpenXML inspection
- no raw value output
Value-level profiling
D002 needs local values to validate uniqueness and joins. Identifier values are normalized and HMAC-tokenized with an ephemeral per-run secret. The secret and tokens are never serialized.
Direct-identifier/free-text columns receive restricted profiling. Do not create value distributions or examples.
SQLite
Only base tables are inspected. Database is opened read-only/query-only; extension loading is disabled. Views are not queried because their SQL may invoke unexpected functions or expensive expressions.
Output review
Generated JSON/Markdown/CSV must not contain known raw source values. Synthetic self-tests explicitly check this invariant.