{"item":{"id":"wf-minimum-permissions","product":"hermes","language":"zh","title":"建立可以实际验证的权限边界","summary":"区分模型指令、工具审批和操作系统访问。用一次允许读取和一次拒绝写入检查实际边界。","contentType":"guide","category":"security","revision":2,"canonicalUrl":"https://botclaw.tech/items/wf-minimum-permissions?lang=zh","sourceUrls":["https://hermes-agent.nousresearch.com/docs/user-guide/security","https://docs.openclaw.ai/gateway/security"],"sourcePublishedAt":"2026-10-01T13:51:23.773Z","reviewedAt":"2026-10-01T00:00:00.000Z","collectedAt":"2026-10-01T13:51:23.773Z","updatedAt":"2026-10-01T13:51:29.241Z","source":{"id":"botclaw-editorial","name":"BotClaw","origin":"editorial"},"summaryMethod":"editor","applicability":{"version":null,"platforms":["Isolated test environment"],"requirements":["可丢弃工作区，条件允许时使用独立测试身份"]},"verification":{"kind":"official_documentation","checkedAt":"2026-10-01T00:00:00.000Z","urls":["https://hermes-agent.nousresearch.com/docs/user-guide/security","https://docs.openclaw.ai/gateway/security"],"limitations":["依据所列官方文档编写的 BotClaw 验收方法。未运行产品命令，请核对自己的安装版本。"]},"body":{"introduction":"提示词“只读”不是操作系统边界。第一次试用使用可丢弃目录、不接敏感账户，并保留可以查看请求的审批策略。","sections":[{"heading":"定义范围","paragraphs":[],"steps":["列出允许文件、外联目标和工具动作。写明一个允许任务：读取样例文件并返回首行。","依据当前安全指南配置审批，不为方便试用而关闭审批。","通过独立系统身份、容器或适合本机的文件权限减少实际访问，核对工具进程确实使用该身份。","尝试向无害的受保护测试位置进行明确禁止的写入，同时检查工具结果和文件系统。"]},{"heading":"成功判据","paragraphs":["允许读取成功，禁止写入没有改变保护位置，执行记录能够指出生效的权限机制。模型拒绝只验证模型行为。安全审计能提供配置证据，但不能证明所有运行边界。"]},{"heading":"添加工具时重新检查","paragraphs":["新渠道、技能或连接器可能扩大边界，每次添加后重新测试禁止动作。意外成功时先停止试用，保留配置和进程证据后再修改。"]}]},"indexable":true,"supersededBy":null,"review":{"state":"current","pendingChanges":0,"policyDays":7}}}