M2 · SF 中心（迭代 gap-fill）

SF-priority R1 → InjFace gap R2 → Taint gap R3
算法：每个 SF 取 5 AP → 补 InjFace 缺口 → 补 Taint 缺口
✅ 三面 100% 覆盖达成 · 所有 AP 触发约束满足
52
AP 总数
100%
InjFace (25/25)
100%
Taint (23/23)
100%
SF (6/6)

三要求自评

9.9
合规 Compliance
inj_channel 必达 96% · sink_intent 有效 100% · triggerable 100% · 字段完整 100%
4.2
合理 Plausibility
profile 匹配 96% · 方法本底 7.5
1.1
不重不漏 Coverage
三面平均 100% · profile 均衡度 13%

deployment_contexts 分布（AP 可触发的部署入口）

标签context_idAP 数占比柱状
CLI taichu-cli/default 52 100%
Web taichu-service/web-caller 21 40%
A-system taichu-service/a-system-caller 0 0%
Relay taichu-service/relay-target 21 40%
Mobile taichu-ffi-v2/default 21 40%

profile_subtree 分布

Agent
25
48%
AgentCollab
1
2%
SubagentRunner
8
15%
Cloud
16
31%
Mobile
2
4%

sink_intent 分布

PrivEsc
7
13%
ActionHarm
24
46%
ConfigTamper
12
23%
SecurityDegrade
5
10%
DataExfil
4
8%

InjFace 覆盖矩阵 (25 条) · hover 查看 ToolTip

✅
PE-00-systemprompt
high · Agent
✅
PE-01-synctoolreturn
critical · Agent
✅
PE-02-asyncbackground
high · SubagentRunner
✅
PE-03-memory
high · Cloud
✅
PE-04-synctoolreturn-presenced
high · AgentCollab
✅
PE-05-mobile-ffi-perception_en
N/A · Mobile
✅
PE-06-mobile-device-tool-retur
N/A · Mobile
✅
PE-07-synctoolreturn-ids
medium · Cloud
✅
PE-08-interagent-subagentpromp
N/A · SubagentRunner
✅
PE-09-interagent-subagenttoolr
N/A · SubagentRunner
❌
PE-10-websocket-sandboxid-path
N/A · Agent
✅
PE-11-memory-workspacestore
high · Cloud
✅
PE-12-synctoolreturn
critical · SubagentRunner
✅
PE-13-synctoolreturn
critical · Agent
✅
PE-14-synctoolreturn
medium · Agent
✅
PE-15-promptbuilder-system_pro
high · Agent
✅
PE-16-memory-to-llm-context
N/A · Agent
✅
PE-17-summary-directives-to-sy
N/A · Agent
✅
PE-18-tool-return-content-re-i
N/A · Agent
✅
PE-19-secondary-llm-call-proce
N/A · Agent
✅
PE-20-memory
N/A · Agent
✅
PE-21-asyncbackground
N/A · Agent
✅
PE-22-systemprompt
N/A · Agent
✅
PE-23-synctoolreturn-filetrans
critical · Cloud
✅
PE-24-systemprompt
critical · Agent

Taint 覆盖矩阵 (23 条) · hover 查看 ToolTip

✅
Taint-memory-00
C · Agent
✅
Taint-memory-01
A · Cloud
✅
Taint-memory-02
C · Cloud
✅
Taint-memory-03
C · Cloud
❌
Taint-memory-04-ry_lcm_summary
A · Cloud
❌
Taint-memory-05-memory_lcm_dag
C · Cloud
❌
Taint-memory-06-reference_reso
C · Agent
❌
Taint-memory-07-memory_lcm_ass
C · Cloud
❌
Taint-memory-08-memory_session
A · Agent
❌
Taint-memory-09-mory_interacti
A · Agent
❌
Taint-memory-10-ssion_sync_tra
C · Agent
✅
Taint-workspace-01
C · Cloud
✅
Taint-config-00
A · Agent
✅
Taint-config-01
A · Agent
✅
Taint-config-02
A · Agent
✅
Taint-config-03
A · Agent
✅
Taint-config-04
A · Cloud
✅
Taint-config-05
A · Cloud
✅
Taint-config-06
A · Agent
❌
Taint-asset-00-session-store-f
C · Cloud
❌
Taint-asset-01-heavy-jwt-secre
A · Cloud
❌
Taint-asset-02-lcm-database
C · Cloud
❌
Taint-asset-03-llm-api-key
A · Agent

SF 覆盖矩阵 (6 条) · hover 查看 ToolTip

❌
SF-01-exec
SinkIntent-PrivEsc · SubagentRunner
❌
SF-02-invoke
SinkIntent-ActionHarm · SubagentRunner
❌
SF-03-resolve
SinkIntent-DataExfil · Cloud
❌
SF-04-pull_remote_files_to_loc
SinkIntent-ConfigTamper · Cloud
❌
SF-05-exec_cli
SinkIntent-ActionHarm · Agent
❌
SF-06-a_system_system_prompt_o
SinkIntent-SecurityDegrade · Agent

完整 AP 列表（52 条）

显示 52 / 总 52
💡 hover 任意对象/行查看 ToolTip；下拉菜单按 InjFace/Taint/SF 单选过滤
AP IDInjFaceTaintSFsink_intent profiledeployment_contextsrequired_toolsround / story / uifinal_score
M2-R1-SF-01-si-1 PE-12-synctoolreturn Taint-asset-asset-heavy-jwt-se SF-01-sink-subagent-delegation-exec PrivEsc SubagentRunner CLI bash, exec_os_api, read, run_subagent R1-SFpriority
📖 —
💬 —		 6.8
M2-R1-SF-01-si-2 PE-02-asyncbackground Taint-asset-asset-llm-api-key SF-01-sink-subagent-delegation-exec PrivEsc SubagentRunner CLI bash, exec_os_api, read, run_subagent R1-SFpriority
📖 —
💬 —		 6.8
M2-R1-SF-01-si-3 PE-08-interagent-subagentpromp Taint-config-00 SF-01-sink-subagent-delegation-exec PrivEsc SubagentRunner CLI bash, exec_os_api, run_subagent, write R1-SFpriority
📖 —
💬 —		 6.8
M2-R1-SF-01-si-4 PE-09-interagent-subagenttoolr Taint-config-01 SF-01-sink-subagent-delegation-exec PrivEsc SubagentRunner CLI bash, exec_os_api, run_subagent, write R1-SFpriority
📖 —
💬 —		 6.8
M2-R1-SF-02-si-1 PE-12-synctoolreturn Taint-asset-asset-heavy-jwt-se SF-02-sink-remote-tool-invoke ActionHarm SubagentRunner CLI bash, exec_cli, exec_os_api, read R1-SFpriority
📖 —
💬 —		 6.8
M2-R1-SF-02-si-2 PE-02-asyncbackground Taint-asset-asset-llm-api-key SF-02-sink-remote-tool-invoke ActionHarm SubagentRunner CLI bash, exec_cli, exec_os_api, read R1-SFpriority
📖 —
💬 —		 6.8
M2-R1-SF-02-si-3 PE-08-interagent-subagentpromp Taint-config-00 SF-02-sink-remote-tool-invoke ActionHarm SubagentRunner CLI bash, exec_cli, exec_os_api, write R1-SFpriority
📖 —
💬 —		 6.8
M2-R1-SF-02-si-4 PE-09-interagent-subagenttoolr Taint-config-01 SF-02-sink-remote-tool-invoke ActionHarm SubagentRunner CLI bash, exec_cli, exec_os_api, write R1-SFpriority
📖 —
💬 —		 6.8
M2-R1-SF-05-Si-1 PE-01-synctoolreturn Taint-asset-asset-llm-api-key SF-05-Sink-SystemExec ActionHarm Agent CLI bash, exec_cli, exec_os_api, read R1-SFpriority
📖 —
💬 —		 6.8
M2-R1-SF-05-Si-2 PE-13-synctoolreturn Taint-config-00 SF-05-Sink-SystemExec ActionHarm Agent CLI bash, exec_cli, exec_os_api, write R1-SFpriority
📖 —
💬 —		 6.8
M2-R1-SF-05-Si-3 PE-24-systemprompt Taint-config-01 SF-05-Sink-SystemExec ActionHarm Agent CLI bash, exec_cli, exec_os_api, write R1-SFpriority
📖 —
💬 —		 6.8
M2-R1-SF-05-Si-4 PE-00-systemprompt Taint-config-02 SF-05-Sink-SystemExec ActionHarm Agent CLI bash, exec_cli, exec_os_api, write R1-SFpriority
📖 —
💬 —		 6.8
M2-R1-SF-05-Si-5 PE-14-synctoolreturn Taint-config-03 SF-05-Sink-SystemExec ActionHarm Agent CLI bash, exec_cli, exec_os_api, write R1-SFpriority
📖 —
💬 —		 6.8
M2-R1-SF-04-Si-1 PE-23-synctoolreturn-filetrans Taint-asset-asset-heavy-jwt-se SF-04-Sink-StateChange ConfigTamper Cloud CLI, Web, Relay, Mobile edit, read, write R1-SFpriority
📖 —
💬 —		 8.4
M2-R1-SF-04-Si-2 PE-03-memory Taint-config-04 SF-04-Sink-StateChange ConfigTamper Cloud CLI, Web, Relay, Mobile edit, write R1-SFpriority
📖 —
💬 —		 8.8
M2-R1-SF-04-Si-3 PE-11-memory-workspacestore Taint-config-05 SF-04-Sink-StateChange ConfigTamper Cloud CLI, Web, Relay, Mobile edit, write R1-SFpriority
📖 —
💬 —		 8.8
M2-R1-SF-04-Si-4 PE-07-synctoolreturn-ids Taint-memory-01 SF-04-Sink-StateChange ConfigTamper Cloud CLI, Web, Relay, Mobile edit, write R1-SFpriority
📖 —
💬 —		 8.8
M2-R1-SF-06-Si-1 PE-01-synctoolreturn Taint-asset-asset-llm-api-key SF-06-Sink-StateChange SecurityDegrade Agent CLI, Web, Relay, Mobile edit, read, write R1-SFpriority
📖 —
💬 —		 8.4
M2-R1-SF-06-Si-2 PE-13-synctoolreturn Taint-config-00 SF-06-Sink-StateChange SecurityDegrade Agent CLI, Web, Relay, Mobile edit, write R1-SFpriority
📖 —
💬 —		 8.8
M2-R1-SF-06-Si-3 PE-24-systemprompt Taint-config-01 SF-06-Sink-StateChange SecurityDegrade Agent CLI, Web, Relay, Mobile edit, write R1-SFpriority
📖 —
💬 —		 8.8
M2-R1-SF-06-Si-4 PE-00-systemprompt Taint-config-02 SF-06-Sink-StateChange SecurityDegrade Agent CLI, Web, Relay, Mobile edit, write R1-SFpriority
📖 —
💬 —		 8.8
M2-R1-SF-06-Si-5 PE-14-synctoolreturn Taint-config-03 SF-06-Sink-StateChange SecurityDegrade Agent CLI, Web, Relay, Mobile edit, write R1-SFpriority
📖 —
💬 —		 8.8
M2-R1-SF-03-si-1 PE-23-synctoolreturn-filetrans Taint-asset-asset-heavy-jwt-se SF-03-sink-file-transfer-path-traversal- DataExfil Cloud CLI, Web, Relay, Mobile app_controller, read, web_fetch R1-SFpriority
📖 —
💬 —		 8.4
M2-R1-SF-03-si-2 PE-03-memory Taint-config-04 SF-03-sink-file-transfer-path-traversal- DataExfil Cloud CLI, Web, Relay, Mobile app_controller, read, web_fetch, write R1-SFpriority
📖 —
💬 —		 8.0
M2-R1-SF-03-si-3 PE-11-memory-workspacestore Taint-config-05 SF-03-sink-file-transfer-path-traversal- DataExfil Cloud CLI, Web, Relay, Mobile app_controller, read, web_fetch, write R1-SFpriority
📖 —
💬 —		 8.0
M2-R1-SF-03-si-4 PE-07-synctoolreturn-ids Taint-memory-01 SF-03-sink-file-transfer-path-traversal- DataExfil Cloud CLI, Web, Relay, Mobile app_controller, read, web_fetch R1-SFpriority
📖 —
💬 —		 8.4
M2-fillInj-PE-20-me-000 PE-20-memory Taint-asset-asset-llm-api-key SF-05-Sink-SystemExec ActionHarm Agent CLI bash, exec_cli, exec_os_api, read, write R2-fillInj
📖 —
💬 —		 6.4
M2-fillInj-PE-10-in-001 PE-10-inj_10 Taint-asset-asset-llm-api-key SF-05-Sink-SystemExec ActionHarm Agent CLI bash, exec_cli, exec_os_api, read R2-fillInj
📖 —
💬 —		 5.6
M2-fillInj-PE-04-sy-002 PE-04-synctoolreturn-presenced Taint-asset-asset-heavy-jwt-se SF-01-sink-subagent-delegation-exec PrivEsc AgentCollab CLI bash, exec_os_api, read, run_subagent R2-fillInj
📖 —
💬 —		 5.6
M2-fillInj-PE-21-as-003 PE-21-asyncbackground Taint-asset-asset-llm-api-key SF-05-Sink-SystemExec ActionHarm Agent CLI bash, exec_cli, exec_os_api, read R2-fillInj
📖 —
💬 —		 6.8
M2-fillInj-PE-05-mo-004 PE-05-mobile-ffi-perception_en Taint-asset-asset-heavy-jwt-se SF-01-sink-subagent-delegation-exec PrivEsc Mobile CLI bash, exec_os_api, read, run_subagent R2-fillInj
📖 —
💬 —		 5.6
M2-fillInj-PE-16-me-005 PE-16-memory-to-llm-context Taint-asset-asset-llm-api-key SF-05-Sink-SystemExec ActionHarm Agent CLI bash, exec_cli, exec_os_api, read, write R2-fillInj
📖 —
💬 —		 6.4
M2-fillInj-PE-19-se-006 PE-19-secondary-llm-call-proce Taint-asset-asset-llm-api-key SF-05-Sink-SystemExec ActionHarm Agent CLI bash, exec_cli, exec_os_api, read R2-fillInj
📖 —
💬 —		 5.6
M2-fillInj-PE-22-sy-007 PE-22-systemprompt Taint-asset-asset-llm-api-key SF-05-Sink-SystemExec ActionHarm Agent CLI bash, exec_cli, exec_os_api, read R2-fillInj
📖 —
💬 —		 6.8
M2-fillInj-PE-06-mo-008 PE-06-mobile-device-tool-retur Taint-asset-asset-heavy-jwt-se SF-01-sink-subagent-delegation-exec PrivEsc Mobile CLI bash, exec_os_api, read, run_subagent R2-fillInj
📖 —
💬 —		 5.6
M2-fillInj-PE-15-pr-009 PE-15-promptbuilder-system_pro Taint-asset-asset-llm-api-key SF-05-Sink-SystemExec ActionHarm Agent CLI bash, exec_cli, exec_os_api, read R2-fillInj
📖 —
💬 —		 6.8
M2-fillInj-PE-18-to-010 PE-18-tool-return-content-re-i Taint-asset-asset-llm-api-key SF-05-Sink-SystemExec ActionHarm Agent CLI bash, exec_cli, exec_os_api, read R2-fillInj
📖 —
💬 —		 6.8
M2-fillInj-PE-17-su-011 PE-17-summary-directives-to-sy Taint-asset-asset-llm-api-key SF-05-Sink-SystemExec ActionHarm Agent CLI bash, exec_cli, exec_os_api, read R2-fillInj
📖 —
💬 —		 6.8
M2-fillTaint-Taint-memo-000 PE-01-synctoolreturn Taint-memory-09 SF-05-Sink-SystemExec ActionHarm Agent CLI bash, exec_cli, exec_os_api R3-fillTaint
📖 —
💬 —		 7.2
M2-fillTaint-Taint-memo-001 PE-23-synctoolreturn-filetrans Taint-memory-05 SF-04-Sink-StateChange ConfigTamper Cloud CLI, Web, Relay, Mobile edit, write R3-fillTaint
📖 —
💬 —		 8.8
M2-fillTaint-Taint-memo-002 PE-01-synctoolreturn Taint-memory-06 SF-05-Sink-SystemExec ActionHarm Agent CLI bash, exec_cli, exec_os_api, write R3-fillTaint
📖 —
💬 —		 6.8
M2-fillTaint-Taint-memo-003 PE-23-synctoolreturn-filetrans Taint-memory-07 SF-04-Sink-StateChange ConfigTamper Cloud CLI, Web, Relay, Mobile edit, write R3-fillTaint
📖 —
💬 —		 8.8
M2-fillTaint-Taint-conf-004 PE-01-synctoolreturn Taint-config-06 SF-05-Sink-SystemExec ActionHarm Agent CLI bash, exec_cli, exec_os_api, write R3-fillTaint
📖 —
💬 —		 6.8
M2-fillTaint-Taint-asse-005 PE-23-synctoolreturn-filetrans Taint-asset-session-store-file SF-04-Sink-StateChange ConfigTamper Cloud CLI, Web, Relay, Mobile edit, write R3-fillTaint
📖 —
💬 —		 8.8
M2-fillTaint-Taint-memo-006 PE-01-synctoolreturn Taint-memory-10 SF-05-Sink-SystemExec ActionHarm Agent CLI bash, exec_cli, exec_os_api R3-fillTaint
📖 —
💬 —		 7.2
M2-fillTaint-Taint-memo-007 PE-23-synctoolreturn-filetrans Taint-memory-02 SF-04-Sink-StateChange ConfigTamper Cloud CLI, Web, Relay, Mobile edit, write R3-fillTaint
📖 —
💬 —		 8.8
M2-fillTaint-Taint-work-008 PE-23-synctoolreturn-filetrans Taint-workspace-01 SF-04-Sink-StateChange ConfigTamper Cloud CLI, Web, Relay, Mobile edit, write R3-fillTaint
📖 —
💬 —		 8.8
M2-fillTaint-Taint-memo-009 PE-01-synctoolreturn Taint-memory-08 SF-05-Sink-SystemExec ActionHarm Agent CLI bash, exec_cli, exec_os_api R3-fillTaint
📖 —
💬 —		 7.2
M2-fillTaint-Taint-memo-010 PE-23-synctoolreturn-filetrans Taint-memory-04 SF-04-Sink-StateChange ConfigTamper Cloud CLI, Web, Relay, Mobile edit, write R3-fillTaint
📖 —
💬 —		 8.8
M2-fillTaint-Taint-asse-011 PE-23-synctoolreturn-filetrans Taint-asset-asset-lcm-database SF-04-Sink-StateChange ConfigTamper Cloud CLI, Web, Relay, Mobile edit, write R3-fillTaint
📖 —
💬 —		 8.8
M2-fillTaint-Taint-memo-012 PE-23-synctoolreturn-filetrans Taint-memory-03 SF-04-Sink-StateChange ConfigTamper Cloud CLI, Web, Relay, Mobile edit, write R3-fillTaint
📖 —
💬 —		 8.8
M2-fillTaint-Taint-memo-013 PE-01-synctoolreturn Taint-memory-00 SF-05-Sink-SystemExec ActionHarm Agent CLI bash, exec_cli, exec_os_api R3-fillTaint
📖 —
💬 —		 7.2
v2.5-iterative-context-tooltip-clean · Lead Agent · 2026-07-07