Skip to content

红队测试与修复闭环 (RT-01~RT-12) - #9

Open
LGD-Eval wants to merge 2 commits into
mainfrom
red-team-fixes
Open

LGD-Eval wants to merge 2 commits into
mainfrom
red-team-fixes

Conversation

@LGD-Eval

Copy link
Copy Markdown
Owner

红队测试与修复闭环(RT-01~RT-12)

以「外人 + 外部 AI」双视角对评测号做红队测试 + 全量实跑,发现可绕过缺口 P0×2 / P1×9,已全部修复并本地复验转绿。

本仓改动

见提交差异。核心修复点:

  • 投毒扫描器:同形字 _deconfuse + 编码体二次扫描 + utf-8-sig,堵 RT-02/03/04
  • 质量门禁:去掉 # skillgate: ignore 静默跳过、收紧三引号注释判定,堵 RT-05/06
  • 哈希存证:不可解析行改标红警告(防删改绕过)+ 拒绝路径穿越,堵 RT-07/08
  • CI 自测:仓库无关化(动态路由 + 可配置清单),堵 RT-09/12 跨仓误报
  • 缺依赖优雅降级 + argparse,堵 RT-10/11
  • GBK 输出固化 sys.stdout.reconfigure(utf-8),clone 裸跑不崩

复验(本地全绿)

  • 投毒扫描自测 16/40/100 PASS
  • 红队对抗回归 12/12 PASS
  • 证据分级 35/35 不变量 PASS
  • 哈希存证 7/7 PASS
  • 三仓 CI 自测全 PASS

安全说明

本 PR 仅新增/修改上述文件,未触碰 main;请 review 后手动 merge。

@github-actions

Copy link
Copy Markdown

🤖 LGD-Eval PR Review Bot

Blocking issues/阻断: 0 — Warnings/提示: 1

  • 🟡 Changed files (2): reviews/cosai-ws4-issue158/attack_vectors.py, reviews/verified-transition-loop/make_variants.py

审核机器人结论:乱码/编码类错误必须修复;提示类仅供人类评审参考。签发权始终在人。
Bot verdict: mojibake/encoding failures must be fixed; warnings are for human reviewers. Sign-off always stays with humans (签发权在人)。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant