عرض عملي: حادثة كشف فيها المساعد طلب عميل آخر

خطوة بخطوة

1. A customer reports seeing someone else's order details; declare the incident and a commander.
2. Trigger the kill switch; time it and confirm the feature is off.
3. Use logged config IDs and retrieved document IDs to find the cause: retrieval searched all orders and relied on the prompt to filter by customer.
4. Planned mistake: fix it by adding "never reveal other customers' data" to the prompt. Fix: enforce authorization in the retrieval and tool layer by the caller's identity.
5. Assess affected users from logs, involve security and privacy, and prepare notifications.
6. Re-enable behind a canary after an evaluation gate with cross-customer test cases; write the postmortem.

اختبر فهمك