Privacy and Compliance

01 · 快递员看得到门牌，是否就能把病历也印在包裹外面01 · If a courier can see an address, may a diagnosis be printed on the parcel?

流程只需要订单号，却顺手带上邮箱和病历摘要。字段都能传输，但脱敏、授权、留存三项少一项还能出站吗？The workflow needs only an order ID but also carries email and a medical summary. The fields can be transmitted, but may they leave when masking, authorization, or retention is missing?

02拖数据字段进入流程，让敏感字段触发脱敏、授权与留存三项检查Drag Data Fields into the Flow and Trigger Masking, Authorization, and Retention Checks

字段流 · 三联出站门field flow · three-part egress gate

状态 AMetric A

—

状态 BMetric B

—

状态 CMetric C

—

所有概率、分数、成本、token 与输出均为固定种子的教学模拟，不代表真实模型输出。把主变量拖回即可复核结论。All probabilities, scores, costs, tokens, and outputs are fixed-seed teaching simulations, not real model output. Move the main variable back to verify the conclusion.

03把刚才的变化拆成 4 个零件Break the Change into Four Parts

Privacy and Compliance

CLASS

字段分类Field classification

普通、个人与受监管字段先分类再处理。Classify ordinary, personal, and regulated fields before processing.

MASK

脱敏Masking

出站内容只保留任务所需的最小信息。Outbound content keeps only the minimum information needed for the task.

AUTH

授权Authorization

处理目的、主体与接收方都要在授权范围内。Purpose, actor, and recipient must all be within authorization.

RET

留存Retention

定义保存多久、何时删除并留下证据。Define how long data is kept, when it is deleted, and what evidence remains.

04最小机制：主交互能逐项验证Minimal Mechanism: Verify Each Link in the Interaction

MECHANISM

egress = non_sensitive ∨ (masked ∧ authorized ∧ retention_set)

拖入普通字段可直接通过；敏感字段同时触发三项检查，缺任何一项都在出站门前阻断。Ordinary fields can pass directly. Sensitive fields trigger all three checks and are blocked before egress if any one is missing.

拖入字段Drag a field识别敏感级别classify sensitivity

运行三项检查Run three checks脱敏 / 授权 / 留存mask / auth / retention

缺一项Any check missing阻断出站block egress

05拖入病历摘要，并故意关闭留存检查Drag in a Medical Summary and Deliberately Disable Retention

主动制造失败Create a failure

边界实验Boundary experiment

隐私门必须对具体字段和处理目的生效。两项通过不代表三项齐全，缺一项就不能出站。Privacy gates apply to specific fields and purposes. Passing two checks is not passing three; any missing check blocks egress.

尚未执行。先在主交互中观察正常机制。Not run yet. Observe the normal mechanism in the main interaction first.

✗ 内部系统就不需要授权。Internal systems do not need authorization.→ ✓ 处理主体与目的仍受授权范围约束。Actors and purposes remain constrained by authorization.

✗ 脱敏后可以永久保留。Masked data may be retained forever.→ ✓ 脱敏不能替代留存期限。Masking does not replace a retention limit.

✗ 只要三项中有两项就能出站。Two of three checks are enough for egress.→ ✓ 敏感字段要求三项同时通过。Sensitive fields require all three checks to pass.

06 · 一句话带走06 · One line to keep

敏感字段进入流程就触发脱敏、授权与留存三项检查；缺任何一项，出站门必须阻断。Sensitive fields trigger masking, authorization, and retention checks as they enter the flow. If any check is missing, the egress gate must block.