Move cmdcore to corecmd, declare attendance ContractFinal in helpers, keep Sheet destructive commands --yes-only, and align catalog/policy provenance. Co-authored-by: Cursor <cursoragent@cursor.com>
690 lines
22 KiB
JSON
690 lines
22 KiB
JSON
{
|
||
"product_id": "audit",
|
||
"tools": {
|
||
"audit export": {
|
||
"agent_summary": "按日期范围导出本地操作审计日志(jsonl 或 csv)",
|
||
"agent_summary_source": "corecmd.SchemaDecl",
|
||
"availability": "available",
|
||
"avoid_when": [
|
||
"只看最近几条用 audit tail",
|
||
"只校验哈希链完整性用 audit verify"
|
||
],
|
||
"confirmation": "not_required",
|
||
"effect": "read",
|
||
"effect_source": "corecmd.contract",
|
||
"examples": [
|
||
"dws audit export --format jsonl",
|
||
"dws audit export --since 2026-07-01 --until 2026-07-14 --format csv"
|
||
],
|
||
"field_provenance": {
|
||
"agent_summary": {
|
||
"value": "按日期范围导出本地操作审计日志(jsonl 或 csv)",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": "按日期范围导出本地操作审计日志(jsonl 或 csv)",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
},
|
||
"availability": {
|
||
"value": "available",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": "available",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
},
|
||
"avoid_when": {
|
||
"value": [
|
||
"只看最近几条用 audit tail",
|
||
"只校验哈希链完整性用 audit verify"
|
||
],
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": [
|
||
"只看最近几条用 audit tail",
|
||
"只校验哈希链完整性用 audit verify"
|
||
],
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
},
|
||
"confirmation": {
|
||
"value": "not_required",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": "not_required",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
},
|
||
"effect": {
|
||
"value": "read",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": "read",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
},
|
||
"examples": {
|
||
"value": [
|
||
"dws audit export --format jsonl",
|
||
"dws audit export --since 2026-07-01 --until 2026-07-14 --format csv"
|
||
],
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": [
|
||
"dws audit export --format jsonl",
|
||
"dws audit export --since 2026-07-01 --until 2026-07-14 --format csv"
|
||
],
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
},
|
||
"idempotency": {
|
||
"value": "idempotent",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": "idempotent",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
},
|
||
"interface_mode": {
|
||
"value": "local",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": "local",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
},
|
||
"interface_reason": {
|
||
"value": "命令读取并导出本地审计日志文件,不绑定 pinned MCP RPC",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": "命令读取并导出本地审计日志文件,不绑定 pinned MCP RPC",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
},
|
||
"interface_ref": {
|
||
"value": null,
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "interface_disposition_matrix",
|
||
"review_reason": "final interface mode local forbids a direct MCP interface_ref",
|
||
"candidates": [
|
||
{
|
||
"value": null,
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true,
|
||
"review_reason": "final interface mode local forbids a direct MCP interface_ref"
|
||
}
|
||
]
|
||
},
|
||
"reviewed": {
|
||
"value": true,
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": true,
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
},
|
||
"risk": {
|
||
"value": "low",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": "low",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
},
|
||
"use_when": {
|
||
"value": [
|
||
"需要把本地审计日志导出为 jsonl/csv,或按 --since/--until 取一段时间"
|
||
],
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": [
|
||
"需要把本地审计日志导出为 jsonl/csv,或按 --since/--until 取一段时间"
|
||
],
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
}
|
||
},
|
||
"idempotency": "idempotent",
|
||
"interface_mode": "local",
|
||
"interface_reason": "命令读取并导出本地审计日志文件,不绑定 pinned MCP RPC",
|
||
"reviewed": true,
|
||
"risk": "low",
|
||
"source_refs": [
|
||
"corecmd.SchemaDecl"
|
||
],
|
||
"use_when": [
|
||
"需要把本地审计日志导出为 jsonl/csv,或按 --since/--until 取一段时间"
|
||
]
|
||
},
|
||
"audit tail": {
|
||
"agent_summary": "查看本地操作审计日志最近 N 条记录",
|
||
"agent_summary_source": "corecmd.SchemaDecl",
|
||
"availability": "available",
|
||
"avoid_when": [
|
||
"需要按日期范围整段导出用 audit export",
|
||
"需要校验哈希链用 audit verify"
|
||
],
|
||
"confirmation": "not_required",
|
||
"effect": "read",
|
||
"effect_source": "corecmd.contract",
|
||
"examples": [
|
||
"dws audit tail",
|
||
"dws audit tail --lines 50"
|
||
],
|
||
"field_provenance": {
|
||
"agent_summary": {
|
||
"value": "查看本地操作审计日志最近 N 条记录",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": "查看本地操作审计日志最近 N 条记录",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
},
|
||
"availability": {
|
||
"value": "available",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": "available",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
},
|
||
"avoid_when": {
|
||
"value": [
|
||
"需要按日期范围整段导出用 audit export",
|
||
"需要校验哈希链用 audit verify"
|
||
],
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": [
|
||
"需要按日期范围整段导出用 audit export",
|
||
"需要校验哈希链用 audit verify"
|
||
],
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
},
|
||
"confirmation": {
|
||
"value": "not_required",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": "not_required",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
},
|
||
"effect": {
|
||
"value": "read",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": "read",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
},
|
||
"examples": {
|
||
"value": [
|
||
"dws audit tail",
|
||
"dws audit tail --lines 50"
|
||
],
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": [
|
||
"dws audit tail",
|
||
"dws audit tail --lines 50"
|
||
],
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
},
|
||
"idempotency": {
|
||
"value": "idempotent",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": "idempotent",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
},
|
||
"interface_mode": {
|
||
"value": "local",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": "local",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
},
|
||
"interface_reason": {
|
||
"value": "命令读取本地审计日志尾部,不绑定 pinned MCP RPC",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": "命令读取本地审计日志尾部,不绑定 pinned MCP RPC",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
},
|
||
"interface_ref": {
|
||
"value": null,
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "interface_disposition_matrix",
|
||
"review_reason": "final interface mode local forbids a direct MCP interface_ref",
|
||
"candidates": [
|
||
{
|
||
"value": null,
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true,
|
||
"review_reason": "final interface mode local forbids a direct MCP interface_ref"
|
||
}
|
||
]
|
||
},
|
||
"reviewed": {
|
||
"value": true,
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": true,
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
},
|
||
"risk": {
|
||
"value": "low",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": "low",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
},
|
||
"use_when": {
|
||
"value": [
|
||
"需要快速查看最近写入的审计记录(默认最近 20 条)"
|
||
],
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": [
|
||
"需要快速查看最近写入的审计记录(默认最近 20 条)"
|
||
],
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
}
|
||
},
|
||
"idempotency": "idempotent",
|
||
"interface_mode": "local",
|
||
"interface_reason": "命令读取本地审计日志尾部,不绑定 pinned MCP RPC",
|
||
"reviewed": true,
|
||
"risk": "low",
|
||
"source_refs": [
|
||
"corecmd.SchemaDecl"
|
||
],
|
||
"use_when": [
|
||
"需要快速查看最近写入的审计记录(默认最近 20 条)"
|
||
]
|
||
},
|
||
"audit verify": {
|
||
"agent_summary": "校验本地审计日志文件的哈希链完整性",
|
||
"agent_summary_source": "corecmd.SchemaDecl",
|
||
"availability": "available",
|
||
"avoid_when": [
|
||
"只浏览或导出日志内容时用 audit tail / audit export"
|
||
],
|
||
"confirmation": "not_required",
|
||
"effect": "read",
|
||
"effect_source": "corecmd.contract",
|
||
"examples": [
|
||
"dws audit verify",
|
||
"dws audit verify --file /path/to/audit.jsonl"
|
||
],
|
||
"field_provenance": {
|
||
"agent_summary": {
|
||
"value": "校验本地审计日志文件的哈希链完整性",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": "校验本地审计日志文件的哈希链完整性",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
},
|
||
"availability": {
|
||
"value": "available",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": "available",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
},
|
||
"avoid_when": {
|
||
"value": [
|
||
"只浏览或导出日志内容时用 audit tail / audit export"
|
||
],
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": [
|
||
"只浏览或导出日志内容时用 audit tail / audit export"
|
||
],
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
},
|
||
"confirmation": {
|
||
"value": "not_required",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": "not_required",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
},
|
||
"effect": {
|
||
"value": "read",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": "read",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
},
|
||
"examples": {
|
||
"value": [
|
||
"dws audit verify",
|
||
"dws audit verify --file /path/to/audit.jsonl"
|
||
],
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": [
|
||
"dws audit verify",
|
||
"dws audit verify --file /path/to/audit.jsonl"
|
||
],
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
},
|
||
"idempotency": {
|
||
"value": "idempotent",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": "idempotent",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
},
|
||
"interface_mode": {
|
||
"value": "local",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": "local",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
},
|
||
"interface_reason": {
|
||
"value": "命令校验本地审计日志哈希链,不绑定 pinned MCP RPC",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": "命令校验本地审计日志哈希链,不绑定 pinned MCP RPC",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
},
|
||
"interface_ref": {
|
||
"value": null,
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "interface_disposition_matrix",
|
||
"review_reason": "final interface mode local forbids a direct MCP interface_ref",
|
||
"candidates": [
|
||
{
|
||
"value": null,
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true,
|
||
"review_reason": "final interface mode local forbids a direct MCP interface_ref"
|
||
}
|
||
]
|
||
},
|
||
"reviewed": {
|
||
"value": true,
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": true,
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
},
|
||
"risk": {
|
||
"value": "low",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": "low",
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
},
|
||
"use_when": {
|
||
"value": [
|
||
"怀疑审计文件被篡改,或需要确认最新/指定文件哈希链是否完整"
|
||
],
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"resolution": "highest_precedence",
|
||
"candidates": [
|
||
{
|
||
"value": [
|
||
"怀疑审计文件被篡改,或需要确认最新/指定文件哈希链是否完整"
|
||
],
|
||
"source": "corecmd.contract",
|
||
"precedence": "contract_final",
|
||
"selected": true
|
||
}
|
||
]
|
||
}
|
||
},
|
||
"idempotency": "idempotent",
|
||
"interface_mode": "local",
|
||
"interface_reason": "命令校验本地审计日志哈希链,不绑定 pinned MCP RPC",
|
||
"reviewed": true,
|
||
"risk": "low",
|
||
"source_refs": [
|
||
"corecmd.SchemaDecl"
|
||
],
|
||
"use_when": [
|
||
"怀疑审计文件被篡改,或需要确认最新/指定文件哈希链是否完整"
|
||
]
|
||
}
|
||
}
|
||
}
|