M5 · profile 均衡（迭代 gap-fill）

5 profile × N 条 → SF/Taint/InjFace 三轮 gap-fill
算法：PROFILE_TARGETS R1 → R2 SF → R3 Taint → R4 InjFace
✅ 三面 100% 覆盖达成 · 所有 AP 触发约束满足
46
AP 总数
100%
InjFace (25/25)
100%
Taint (23/23)
100%
SF (6/6)

三要求自评

9.9
合规 Compliance
inj_channel 必达 96% · sink_intent 有效 100% · triggerable 100% · 字段完整 100%
4.2
合理 Plausibility
profile 匹配 83% · 方法本底 7.5
2.5
不重不漏 Coverage
三面平均 100% · profile 均衡度 59%

deployment_contexts 分布（AP 可触发的部署入口）

标签context_idAP 数占比柱状
CLI taichu-cli/default 46 100%
Web taichu-service/web-caller 22 48%
A-system taichu-service/a-system-caller 0 0%
Relay taichu-service/relay-target 22 48%
Mobile taichu-ffi-v2/default 22 48%

profile_subtree 分布

Agent
15
33%
AgentCollab
5
11%
SubagentRunner
8
17%
Cloud
12
26%
Mobile
6
13%

sink_intent 分布

PrivEsc
4
9%
ActionHarm
20
43%
ConfigTamper
7
15%
SecurityDegrade
10
22%
DataExfil
5
11%

InjFace 覆盖矩阵 (25 条) · hover 查看 ToolTip

✅
PE-00-systemprompt
high · Agent
✅
PE-01-synctoolreturn
critical · Agent
✅
PE-02-asyncbackground
high · SubagentRunner
✅
PE-03-memory
high · Cloud
✅
PE-04-synctoolreturn-presenced
high · AgentCollab
✅
PE-05-mobile-ffi-perception_en
N/A · Mobile
✅
PE-06-mobile-device-tool-retur
N/A · Mobile
✅
PE-07-synctoolreturn-ids
medium · Cloud
✅
PE-08-interagent-subagentpromp
N/A · SubagentRunner
✅
PE-09-interagent-subagenttoolr
N/A · SubagentRunner
❌
PE-10-websocket-sandboxid-path
N/A · Agent
✅
PE-11-memory-workspacestore
high · Cloud
✅
PE-12-synctoolreturn
critical · SubagentRunner
✅
PE-13-synctoolreturn
critical · Agent
✅
PE-14-synctoolreturn
medium · Agent
✅
PE-15-promptbuilder-system_pro
high · Agent
✅
PE-16-memory-to-llm-context
N/A · Agent
✅
PE-17-summary-directives-to-sy
N/A · Agent
✅
PE-18-tool-return-content-re-i
N/A · Agent
✅
PE-19-secondary-llm-call-proce
N/A · Agent
✅
PE-20-memory
N/A · Agent
✅
PE-21-asyncbackground
N/A · Agent
✅
PE-22-systemprompt
N/A · Agent
✅
PE-23-synctoolreturn-filetrans
critical · Cloud
✅
PE-24-systemprompt
critical · Agent

Taint 覆盖矩阵 (23 条) · hover 查看 ToolTip

✅
Taint-memory-00
C · Agent
✅
Taint-memory-01
A · Cloud
✅
Taint-memory-02
C · Cloud
✅
Taint-memory-03
C · Cloud
❌
Taint-memory-04-ry_lcm_summary
A · Cloud
❌
Taint-memory-05-memory_lcm_dag
C · Cloud
❌
Taint-memory-06-reference_reso
C · Agent
❌
Taint-memory-07-memory_lcm_ass
C · Cloud
❌
Taint-memory-08-memory_session
A · Agent
❌
Taint-memory-09-mory_interacti
A · Agent
❌
Taint-memory-10-ssion_sync_tra
C · Agent
✅
Taint-workspace-01
C · Cloud
✅
Taint-config-00
A · Agent
✅
Taint-config-01
A · Agent
✅
Taint-config-02
A · Agent
✅
Taint-config-03
A · Agent
✅
Taint-config-04
A · Cloud
✅
Taint-config-05
A · Cloud
✅
Taint-config-06
A · Agent
❌
Taint-asset-00-session-store-f
C · Cloud
❌
Taint-asset-01-heavy-jwt-secre
A · Cloud
❌
Taint-asset-02-lcm-database
C · Cloud
❌
Taint-asset-03-llm-api-key
A · Agent

SF 覆盖矩阵 (6 条) · hover 查看 ToolTip

❌
SF-01-exec
SinkIntent-PrivEsc · SubagentRunner
❌
SF-02-invoke
SinkIntent-ActionHarm · SubagentRunner
❌
SF-03-resolve
SinkIntent-DataExfil · Cloud
❌
SF-04-pull_remote_files_to_loc
SinkIntent-ConfigTamper · Cloud
❌
SF-05-exec_cli
SinkIntent-ActionHarm · Agent
❌
SF-06-a_system_system_prompt_o
SinkIntent-SecurityDegrade · Agent

完整 AP 列表（46 条）

显示 46 / 总 46
💡 hover 任意对象/行查看 ToolTip；下拉菜单按 InjFace/Taint/SF 单选过滤
AP IDInjFaceTaintSFsink_intent profiledeployment_contextsrequired_toolsround / story / uifinal_score
M5-R1-Agen-01 PE-01-synctoolreturn Taint-asset-asset-llm-api-key SF-05-Sink-SystemExec ActionHarm Agent CLI bash, exec_cli, exec_os_api, read R1-profile
📖 —
💬 —		 6.8
M5-R1-Agen-02 PE-13-synctoolreturn Taint-config-00 SF-06-Sink-StateChange SecurityDegrade Agent CLI, Web, Relay, Mobile edit, write R1-profile
📖 —
💬 —		 8.8
M5-R1-Agen-03 PE-24-systemprompt Taint-config-01 SF-05-Sink-SystemExec ActionHarm Agent CLI bash, exec_cli, exec_os_api, write R1-profile
📖 —
💬 —		 6.8
M5-R1-Agen-04 PE-00-systemprompt Taint-config-02 SF-06-Sink-StateChange SecurityDegrade Agent CLI, Web, Relay, Mobile edit, write R1-profile
📖 —
💬 —		 8.8
M5-R1-Agen-05 PE-14-synctoolreturn Taint-config-03 SF-05-Sink-SystemExec ActionHarm Agent CLI bash, exec_cli, exec_os_api, write R1-profile
📖 —
💬 —		 6.8
M5-R1-Agen-06 PE-10-inj_10 Taint-config-06 SF-06-Sink-StateChange SecurityDegrade Agent CLI, Web, Relay, Mobile edit, write R1-profile
📖 —
💬 —		 7.6
M5-R1-Agen-07 PE-15-promptbuilder-system_pro Taint-memory-08 SF-05-Sink-SystemExec ActionHarm Agent CLI bash, exec_cli, exec_os_api R1-profile
📖 —
💬 —		 7.2
M5-R1-Agen-08 PE-16-memory-to-llm-context Taint-memory-09 SF-06-Sink-StateChange SecurityDegrade Agent CLI, Web, Relay, Mobile edit, write R1-profile
📖 —
💬 —		 8.8
M5-R1-Agen-09 PE-17-summary-directives-to-sy Taint-memory-00 SF-05-Sink-SystemExec ActionHarm Agent CLI bash, exec_cli, exec_os_api R1-profile
📖 —
💬 —		 7.2
M5-R1-Agen-10 PE-18-tool-return-content-re-i Taint-memory-06 SF-06-Sink-StateChange SecurityDegrade Agent CLI, Web, Relay, Mobile edit, write R1-profile
📖 —
💬 —		 8.8
M5-R1-Agen-01 PE-04-synctoolreturn-presenced Taint-asset-asset-heavy-jwt-se SF-05-Sink-SystemExec ActionHarm AgentCollab CLI bash, exec_cli, exec_os_api, read R1-profile
📖 —
💬 —		 5.6
M5-R1-Agen-02 PE-04-synctoolreturn-presenced Taint-asset-asset-llm-api-key SF-06-Sink-StateChange SecurityDegrade AgentCollab CLI, Web, Relay, Mobile edit, read, write R1-profile
📖 —
💬 —		 7.2
M5-R1-Agen-03 PE-04-synctoolreturn-presenced Taint-config-00 SF-05-Sink-SystemExec ActionHarm AgentCollab CLI bash, exec_cli, exec_os_api, write R1-profile
📖 —
💬 —		 5.6
M5-R1-Agen-04 PE-04-synctoolreturn-presenced Taint-config-01 SF-06-Sink-StateChange SecurityDegrade AgentCollab CLI, Web, Relay, Mobile edit, write R1-profile
📖 —
💬 —		 7.6
M5-R1-Agen-05 PE-04-synctoolreturn-presenced Taint-config-02 SF-05-Sink-SystemExec ActionHarm AgentCollab CLI bash, exec_cli, exec_os_api, write R1-profile
📖 —
💬 —		 5.6
M5-R1-Suba-01 PE-12-synctoolreturn Taint-asset-asset-heavy-jwt-se SF-01-sink-subagent-delegation-exec PrivEsc SubagentRunner CLI bash, exec_os_api, read, run_subagent R1-profile
📖 —
💬 —		 6.8
M5-R1-Suba-02 PE-02-asyncbackground Taint-asset-asset-llm-api-key SF-02-sink-remote-tool-invoke ActionHarm SubagentRunner CLI bash, exec_cli, exec_os_api, read R1-profile
📖 —
💬 —		 6.8
M5-R1-Suba-03 PE-08-interagent-subagentpromp Taint-config-00 SF-01-sink-subagent-delegation-exec PrivEsc SubagentRunner CLI bash, exec_os_api, run_subagent, write R1-profile
📖 —
💬 —		 6.8
M5-R1-Suba-04 PE-09-interagent-subagenttoolr Taint-config-01 SF-02-sink-remote-tool-invoke ActionHarm SubagentRunner CLI bash, exec_cli, exec_os_api, write R1-profile
📖 —
💬 —		 6.8
M5-R1-Suba-05 PE-12-synctoolreturn Taint-config-02 SF-01-sink-subagent-delegation-exec PrivEsc SubagentRunner CLI bash, exec_os_api, run_subagent, write R1-profile
📖 —
💬 —		 6.8
M5-R1-Suba-06 PE-02-asyncbackground Taint-config-03 SF-02-sink-remote-tool-invoke ActionHarm SubagentRunner CLI bash, exec_cli, exec_os_api, write R1-profile
📖 —
💬 —		 6.8
M5-R1-Suba-07 PE-08-interagent-subagentpromp Taint-config-04 SF-01-sink-subagent-delegation-exec PrivEsc SubagentRunner CLI bash, exec_os_api, run_subagent, write R1-profile
📖 —
💬 —		 6.8
M5-R1-Suba-08 PE-09-interagent-subagenttoolr Taint-config-05 SF-02-sink-remote-tool-invoke ActionHarm SubagentRunner CLI bash, exec_cli, exec_os_api, write R1-profile
📖 —
💬 —		 6.8
M5-R1-Clou-01 PE-23-synctoolreturn-filetrans Taint-asset-asset-heavy-jwt-se SF-04-Sink-StateChange ConfigTamper Cloud CLI, Web, Relay, Mobile edit, read, write R1-profile
📖 —
💬 —		 8.4
M5-R1-Clou-02 PE-03-memory Taint-config-04 SF-03-sink-file-transfer-path-traversal- DataExfil Cloud CLI, Web, Relay, Mobile app_controller, read, web_fetch, write R1-profile
📖 —
💬 —		 8.0
M5-R1-Clou-03 PE-11-memory-workspacestore Taint-config-05 SF-04-Sink-StateChange ConfigTamper Cloud CLI, Web, Relay, Mobile edit, write R1-profile
📖 —
💬 —		 8.8
M5-R1-Clou-04 PE-07-synctoolreturn-ids Taint-memory-01 SF-03-sink-file-transfer-path-traversal- DataExfil Cloud CLI, Web, Relay, Mobile app_controller, read, web_fetch R1-profile
📖 —
💬 —		 8.4
M5-R1-Clou-05 PE-23-synctoolreturn-filetrans Taint-memory-04 SF-04-Sink-StateChange ConfigTamper Cloud CLI, Web, Relay, Mobile edit, write R1-profile
📖 —
💬 —		 8.8
M5-R1-Clou-06 PE-03-memory Taint-asset-asset-lcm-database SF-03-sink-file-transfer-path-traversal- DataExfil Cloud CLI, Web, Relay, Mobile app_controller, read, web_fetch, write R1-profile
📖 —
💬 —		 8.0
M5-R1-Clou-07 PE-11-memory-workspacestore Taint-asset-session-store-file SF-04-Sink-StateChange ConfigTamper Cloud CLI, Web, Relay, Mobile edit, write R1-profile
📖 —
💬 —		 8.8
M5-R1-Clou-08 PE-07-synctoolreturn-ids Taint-memory-02 SF-03-sink-file-transfer-path-traversal- DataExfil Cloud CLI, Web, Relay, Mobile app_controller, read, web_fetch R1-profile
📖 —
💬 —		 8.4
M5-R1-Clou-09 PE-23-synctoolreturn-filetrans Taint-memory-03 SF-04-Sink-StateChange ConfigTamper Cloud CLI, Web, Relay, Mobile edit, write R1-profile
📖 —
💬 —		 8.8
M5-R1-Clou-10 PE-03-memory Taint-memory-05 SF-03-sink-file-transfer-path-traversal- DataExfil Cloud CLI, Web, Relay, Mobile app_controller, read, web_fetch, write R1-profile
📖 —
💬 —		 8.0
M5-R1-Mobi-01 PE-05-mobile-ffi-perception_en Taint-asset-asset-heavy-jwt-se SF-05-Sink-SystemExec ActionHarm Mobile CLI bash, exec_cli, exec_os_api, read R1-profile
📖 —
💬 —		 5.6
M5-R1-Mobi-02 PE-06-mobile-device-tool-retur Taint-asset-asset-llm-api-key SF-06-Sink-StateChange SecurityDegrade Mobile CLI, Web, Relay, Mobile edit, read, write R1-profile
📖 —
💬 —		 7.2
M5-R1-Mobi-03 PE-05-mobile-ffi-perception_en Taint-config-00 SF-05-Sink-SystemExec ActionHarm Mobile CLI bash, exec_cli, exec_os_api, write R1-profile
📖 —
💬 —		 5.6
M5-R1-Mobi-04 PE-06-mobile-device-tool-retur Taint-config-01 SF-06-Sink-StateChange SecurityDegrade Mobile CLI, Web, Relay, Mobile edit, write R1-profile
📖 —
💬 —		 7.6
M5-R1-Mobi-05 PE-05-mobile-ffi-perception_en Taint-config-02 SF-05-Sink-SystemExec ActionHarm Mobile CLI bash, exec_cli, exec_os_api, write R1-profile
📖 —
💬 —		 5.6
M5-R1-Mobi-06 PE-06-mobile-device-tool-retur Taint-config-03 SF-06-Sink-StateChange SecurityDegrade Mobile CLI, Web, Relay, Mobile edit, write R1-profile
📖 —
💬 —		 7.6
M5-fillTaint-Taint-memo-000 PE-23-synctoolreturn-filetrans Taint-memory-07 SF-04-Sink-StateChange ConfigTamper Cloud CLI, Web, Relay, Mobile edit, write R3-fillTaint
📖 —
💬 —		 8.8
M5-fillTaint-Taint-memo-001 PE-01-synctoolreturn Taint-memory-10 SF-05-Sink-SystemExec ActionHarm Agent CLI bash, exec_cli, exec_os_api R3-fillTaint
📖 —
💬 —		 7.2
M5-fillTaint-Taint-work-002 PE-23-synctoolreturn-filetrans Taint-workspace-01 SF-04-Sink-StateChange ConfigTamper Cloud CLI, Web, Relay, Mobile edit, write R3-fillTaint
📖 —
💬 —		 8.8
M5-fillInj-PE-20-me-000 PE-20-memory Taint-asset-asset-llm-api-key SF-05-Sink-SystemExec ActionHarm Agent CLI bash, exec_cli, exec_os_api, read, write R4-fillInj
📖 —
💬 —		 6.4
M5-fillInj-PE-22-sy-001 PE-22-systemprompt Taint-asset-asset-llm-api-key SF-05-Sink-SystemExec ActionHarm Agent CLI bash, exec_cli, exec_os_api, read R4-fillInj
📖 —
💬 —		 6.8
M5-fillInj-PE-19-se-002 PE-19-secondary-llm-call-proce Taint-asset-asset-llm-api-key SF-05-Sink-SystemExec ActionHarm Agent CLI bash, exec_cli, exec_os_api, read R4-fillInj
📖 —
💬 —		 5.6
M5-fillInj-PE-21-as-003 PE-21-asyncbackground Taint-asset-asset-llm-api-key SF-05-Sink-SystemExec ActionHarm Agent CLI bash, exec_cli, exec_os_api, read R4-fillInj
📖 —
💬 —		 6.8
v2.5-iterative-context-tooltip-clean · Lead Agent · 2026-07-07