定义 Pilot 跨租户、跨学生与响应安全验收阈值 #17
Reference in New Issue
Block a user
No description provided.
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Parent
#12
Question
Pilot 验收对两个租户、两个学生、重叠资源标识、提交后报告、错题、收藏以及提交前敏感字段应满足哪些明确的通过/失败标准?需要哪些浏览器、API、数据库或日志证据,才能证明越权被拒绝且错误响应不泄露答案、解释、token 或个人敏感信息?
Resolution
通过与用户逐项确认验收矩阵、拒绝状态码、证据格式和不可接受的泄露内容后,记录最终标准。