凡自治之物 · LGD 治理学 · 创造术家族 ｜ 评测协议：见平台质量门禁规范
English
When to use
Use it when the user plans to share a document, piece of code or log externally; when content might contain internal paths or leaked secrets and needs checking; and when a pre-release privacy-compliance self-check is required to make sure no personal identifiers (PII) or other sensitive data goes out.
Usage
Call the core script python desens_scan.py with the target file path, e.g. python desens_scan.py -i document.txt. To customize the desensitization rules, add --target-key [type] (e.g. pii, key, path). The system reads the input content directly and scans / processes it.
Workflow
Step 1: the user provides the raw document or code stream as input. Step 2: the engine loads desens_scan.py and parses the content in depth, identifying the four sensitive classes: PII, secrets, internal paths and internal codenames. Step 3: automatic masking (redact / replace) runs and a traceable processing record is generated. Step 4: the redacted content plus a full risk list is produced. Step 5: the audit log is attached when delivering the result, satisfying the theoretical root of "evidenced — accountable".
Evidence & safety statement
- Evidence: TBD (no evaluation / badge link yet; update here once it is produced)
- Version: 1.1.1
- Security: no independent security scan has been performed (TBD); the conclusion is pending and no endorsement is given until it is completed.
中文
何时用
用户计划将文档、代码或日志对外共享时；发现内容可能存在内部路径、密钥泄露风险需要排查时；在发布前执行隐私合规自检，确保不包含个人标识（PII）及其他敏感信息时使用。
用法
调用核心脚本命令 python desens_scan.py，并传入目标文件路径参数 [path]，例如 python desens_scan.py -i document.txt。若需自定义脱敏规则，可添加参数 --target-key [密钥类型]（如 pii, key, path）；系统将直接读取输入内容进行扫描与处理。
流程
第一步：用户提供待处理的原始文档或代码流作为输入。第二步：技能引擎加载 desens_scan.py 脚本对内容进行深度解析，识别 PII、密钥、内部路径等四类敏感项。第三步：执行自动脱敏操作（打码/替换）并生成可追溯的处理记录。第四步：输出包含完整风险清单的脱敏版本内容。第五步：交付最终结果时附带审计日志，满足“有证可追责”的理论根基要求。
证据与安全声明
- 证据：TBD（暂无评测/徽章链接；产生后在此更新实际链接）
- 版本：1.1.1
- 安全：未做独立安全扫描（TBD），结论待补；补全前不作推荐背书。