Files
iAOP/core/llm-gateway/config/dlp.template.yaml

52 lines
1.9 KiB
YAML
Raw Permalink Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
# -*- coding: utf-8 -*-
# 模板 DLP 规则资产示例:ti-cl4(氯化车间/海绵钛,Template-Ti 一期)。
#
# 说明:
# - 这是「敏感词/DLP 规则」配置点(PRD 5.4):换行业只改本文件,内核零改动;
# - mode: fail-closed —— 命中任一规则即拦截出站(目标 DLP 拦截率 100%);
# - kind: keyword 大小写不敏感子串匹配;regex 正则匹配;
# - 通用 PII/凭证规则由内核内置保底(DLP_DEFAULT_RULES),无需重复配置;
# 本文件只补充**行业敏感资产**(工艺参数 / 配方 / 关键设备 / 人员等)。
template: ti-cl4
version: 1.0.0
mode: fail-closed
rules:
# ---- 工艺敏感参数(Ti-1 氯化车间) ----
- name: proc_cl2_flow
category: process-parameter
kind: keyword
pattern: 氯气流量
description: 氯气流量参数(工艺敏感)
- name: proc_furnace_temp
category: process-parameter
kind: keyword
pattern: 炉温
description: 炉温参数(工艺敏感)
- name: proc_feeding_ratio
category: process-parameter
kind: keyword
pattern: 加料比
description: 加料配比参数(工艺敏感)
- name: proc_ti_purity
category: process-parameter
kind: keyword
pattern: 钛纯度
description: 产品质量指标(钛纯度)
- name: proc_formula_detail
category: process-parameter
kind: regex
pattern: '配比\s*[::]?\s*[\d.]+%?'
description: 配方配比数值(结构化敏感数据)
# ---- 设备 / 工艺关键点(内部敏感命名) ----
- name: proc_furnace_id
category: process-asset
kind: regex
pattern: '沸腾氯化炉\s*[A-Z]?\d+'
description: 关键设备编号(沸腾氯化炉)
# ---- 人员 / 排班(内部敏感) ----
- name: staff_contact
category: personnel
kind: keyword
pattern: 值班长
description: 岗位/人员信息(内部敏感)