MoonGate 运行报告

策略 workspace-assistant · 指纹 72bd70247bc1fb4a · 18 条账本记录
哈希链完整 · 18 条
账本 ns\demo.jsonl
策略文件 amples\policy.workspace.json
生成于 2026-10-22 12:20:56Z
执行（含审批通过）
4
拒绝
3
需要审批
2
新增敏感值
2

被拦下的调用

工具判定规则原因调用证据
net.post deny secret-reveal destination is not allowed to receive a protected value c3 1
fs.read deny deny-escape path escapes the workspace c5 0
fs.delete deny no-delete deletion is never delegated to an agent c8 0

审批

批准 1 次，拒绝或超时 1 次。每次批准只对当次调用的参数哈希生效。

时间线（最近 200 条）

  1. #0 session_open
  2. #1 passthrough
  3. #2 tool_list_filtered
  4. #3 fs.read allow read-workspace
  5. #4 fs.read result
  6. #5 fs.read allow read-workspace
  7. #6 fs.read result
  8. #7 net.post deny secret-reveal destination is not allowed to receive a protected value
  9. #8 net.post allow internal-collector
  10. #9 net.post result
  11. #10 fs.read deny deny-escape path escapes the workspace
  12. #11 fs.write approval write-report writes outside the report directory are reviewed by a human
  13. #12 fs.write approval granted
  14. #13 fs.write result
  15. #14 fs.write approval write-report writes outside the report directory are reviewed by a human
  16. #15 fs.write approval denied
  17. #16 fs.delete deny no-delete deletion is never delegated to an agent
  18. #17 session_close