360 Secure SkillHub
360 安全技能中心

Project Memory Guard

这是一个项目记忆写入前的校验 Skill:根据 project_id、memory_type、timestamp、confidence 等字段,判断内容应接受、拒绝或转投到 inbox/cleanup,并在接受或转投时生成规范化记录;不执行实际存储、迁移或外部调用。

sunbinnju-star
sunbinnju-star
热度 40.42
最近更新 2026-05-11 17:37:23
分类:知识依赖:纯提示词应用场景:笔记整理 / 工作流 / 数据处理

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add project-memory-guard
Metadata
name
project-memory-guard
description
Enforce project boundaries and memory writeback rules before anything enters project memory. Use before: writing notes into project memory, saving outputs/tasks/summaries, importing external messages into projects, migrating historical records. Triggered when anything attempts to write to project memory or when project boundary validation is needed.

Project Memory Guard

Validate every memory write against project and writeback rules. Prevent contamination and schema drift.

Input

Required fields:

  • raw_content — the content attempting to enter project memory
  • candidate_project_id — the project being written to
  • memory_type — type of memory: note, finding, task, summary, record, etc.
  • source — where this came from: user message, paper, tool output, etc.
  • timestamp — ISO-8601 timestamp of when the content was created
  • confidence — confidence score 0.0–1.0 for project assignment

Output Schema

decision: "accept" | "reject" | "reroute"
destination: string | null          # project_id or "inbox" or null
normalized_record: object | null    # cleaned record if accepted/rerouted
contamination_risk: "none" | "low" | "medium" | "high"
missing_fields: string[] | null
reason: string

Hard Rules

Condition Decision
Missing project_id reject — never enter formal project memory
Missing memory_type reject — no formal writeback
Missing timestamp reject — no formal writeback
Confidence < 0.6 reroute to inbox
Cross-project ambiguity reroute to inbox or cleanup mode
All fields present + high confidence accept

Reroute Destinations

  • inbox — unverified content waiting for manual review
  • cleanup — ambiguous content needing disambiguation
  • Specific project_id — when rerouting to a known project

Normalization

When decision is accept or reroute, normalize the record:

  • Strip identifying metadata not in schema
  • Add validated_at timestamp
  • Add guard_version = "1.0"
  • Preserve original raw_content in normalized_record.raw

Failure Handling

If uncertain about any field:

  • Do not guess project_id or memory_type
  • Set decision = "reroute" with destination = "inbox"
  • List missing_fields explicitly
  • Explain in reason

Never force acceptance when validation fails.