{"item":{"id":"obs-topic-isolation","product":"grok-bot","language":"zh","title":"两个 agent 就是两个隔离工作区吗？","summary":"追踪共享文件、浏览器会话、凭据和权限。不同名称与对话不能证明环境分离。","contentType":"guide","category":"security","revision":2,"canonicalUrl":"https://botclaw.tech/items/obs-topic-isolation?lang=zh","sourceUrls":["https://x.ai/bot","https://research.meta.ai/blog/security-and-safety-for-ai-agents-our-approach-with-muse","https://docs.openclaw.ai/gateway/security"],"sourcePublishedAt":"2026-10-01T16:24:26.193Z","reviewedAt":"2026-10-01T15:50:00.000Z","collectedAt":"2026-10-01T16:24:26.193Z","updatedAt":"2026-10-01T16:24:32.310Z","source":{"id":"botclaw-editorial","name":"BotClaw","origin":"editorial"},"summaryMethod":"editor","applicability":{"version":null,"platforms":[],"requirements":["核对当前账户访问、方案与任务条件。"]},"verification":{"kind":"official_documentation","checkedAt":"2026-10-01T15:50:00.000Z","urls":["https://x.ai/bot","https://research.meta.ai/blog/security-and-safety-for-ai-agents-our-approach-with-muse","https://docs.openclaw.ai/gateway/security"],"limitations":["有来源的事实与本站编辑判断；未运行产品账户、推理或 agent 性能测试。"]},"body":{"introduction":"隔离有范围：用户之间、agent 之间、任务之间，或运行环境与凭据之间。要问清来源描述的是哪一条边界。","sections":[{"heading":"标出共享状态","paragraphs":["画出文件存储、浏览器 profile、凭据服务和权限控制，标明每个 agent 能读写什么。共享电脑可以便利协作，也改变并发与隐私假设。"]},{"heading":"使用可观察的测试","paragraphs":["在一个工作区放置虚构标记，让第二个 agent 寻找，但不告知标记内容。分别核对允许共享与预期隔离；不要用真实凭据作标记。"]},{"heading":"记录边界","paragraphs":[],"steps":["记录用户、agent、任务与工作区标识。","启用并发任务前检查文件与浏览器可见性。","将结果记录为当前配置的观察，不扩展为普遍产品保证。"]}]},"editorial":{"section":"topic","productIds":["grok-bot","muse","openclaw","cue"],"relatedIds":["obs-profile-grok-bot","obs-topic-approvals"],"sourceDate":null,"version":null},"indexable":true,"supersededBy":null,"review":{"state":"current","pendingChanges":0,"policyDays":7}}}