{
  "schema_version": "3.4.0",
  "generated": "2026-07-09",
  "updated": "2026-07-16 (#518 升级 v3.4.0：补 AP-2501/AP-2502 fixture_grounded 类别 · 16 AP 总数 · 与 ap_collection.json v3.5.0 对齐)",
  "previous_schema_version": "3.1 (D86 重审 · T1+T8 不可达推翻)",
  "generator": "three-face-serial-ap (D67 v1.1 · D74 重排 · D76 本体论 · D77 审查 · D78 精简 · D80 重编号)",
  "total_aps_kept": 11,
  "total_aps_demoted": 3,
  "total_aps_unreachable": 0,
  "total_aps": 16,
  "d74_status": "applied · 每 Taint L1 保留最高分 · 其他降权",
  "d76_status": "applied · AP = N × Source-Sink 对 · 有 Taint ⇒ N≥2 · 无 Taint = N=1",
  "d77_status": "applied · 全量审查发现 3 错 · D78 修正 + 精简",
  "d78_status": "applied · 精简 22→14 · 「多一事不如少一事」",
  "d80_status": "applied · 重编号 AP-2001~2014 · 可达 9 + 降权 3 + 不可达 2",
  "numbering_rule": "D80 · 可达排前 · 不可达/不可测试排后 · 起始 AP-2001",
  "faces": {
    "Inject": {
      "L1_total": 1,
      "L1_covered": 1,
      "L1_rate": "1/1 (100%) ✅",
      "L2_total": 8,
      "L2_covered": 7,
      "L2_rate": "7/8 (88%) · 公域·商家仍缺",
      "covered_by": {
        "公域·URL链接": "AP-2007, AP-2016",
        "公域（子Agent tool 来源）": "AP-2009",
        "私域·邮件": "AP-2001, AP-2003, AP-2004, AP-2501, AP-2502",
        "公域·UGC": "AP-2005, AP-2008",
        "私域·手机文件": "AP-2002, AP-2006",
        "私域·日历": "AP-2015",
        "公域·商家": "TBD · v3.4.0 仍缺（暂无 fixture 落地）"
      }
    },
    "Taint": {
      "L1_total": 8,
      "L1_covered": 8,
      "L1_rate": "8/8 (100%) · D86 T1/T8 重审激活",
      "L2_total": 23,
      "L2_covered": 8,
      "L2_rate": "8/23 (35%) · D86 T1 messages Vec + T8 4 obj 激活",
      "covered_by": {
        "T1 短时记忆": "AP-2015 (messages Vec 宽泛偏好 · 8.7)",
        "T2 长时记忆": "AP-2009 (session-store · 8.3)",
        "T3 AgentCore": "AP-2001 (.claude/config.json · 9.8)",
        "T4 Skill/MCP/Plugin": "AP-2004 (Skill 装载空间 · 9.2)",
        "T5 记忆服务": "AP-2005 (mongodb-user-data · 9.2)",
        "T6 SubAgent": "AP-2003 (subagent_manifest.yaml · 9.4)",
        "T7 本地文件": "AP-2002, AP-2501",
        "T8 定时任务": "AP-2016 (cron-schedule + systemd-timer + App scheduler 跨 PC/Mobile/cloud · 9.9)"
      }
    },
    "Harm": {
      "L1_total": 7,
      "L1_covered": 7,
      "L1_rate": "7/7 (100%) ✅",
      "L2_total": 42,
      "L2_covered_kept": 9,
      "L2_rate_kept": "9/42 (21%)",
      "L2_rate_with_demoted": "12/42 (29%)",
      "covered_by": {
        "⚡系统执行/bash-rce": [
          "AP-2002",
          "AP-2003",
          "AP-2007"
        ],
        "📁文件操作/write-file": [
          "AP-2001",
          "AP-2002"
        ],
        "📁文件操作/read-file": [
          "AP-2008"
        ],
        "🌐网络/dmq-kafka-publish": [
          "AP-2001",
          "AP-2008",
          "AP-2009"
        ],
        "🤖子Agent/subagent-delegation-exec": [
          "AP-2003",
          "AP-2004"
        ],
        "🤖子Agent/agent-create": [
          "AP-2003"
        ],
        "🎨AIGC/CodeInterpreter": [
          "AP-2004"
        ],
        "📱App_controller/contact-read": [
          "AP-2006"
        ],
        "📱App_controller/mobile_sms_send": [
          "AP-2006"
        ],
        "🧰其它/settings.write": [
          "AP-2005 (demoted)"
        ],
        "🧰其它/config_write": [
          "AP-2001",
          "AP-2005"
        ],
        "🎨AIGC/image_generate": [
          "AP-2012 (demoted)"
        ],
        "⚡系统执行/crontab+command-injection": [
          "AP-2011 (demoted · 二次触发完全自动)"
        ]
      }
    }
  },
  "structure_groups": {
    "A_durable_taint": {
      "count": 9,
      "kept": [
        "AP-2001",
        "AP-2002",
        "AP-2003",
        "AP-2004",
        "AP-2005",
        "AP-2009"
      ],
      "demoted": [
        "AP-2010",
        "AP-2011",
        "AP-2012"
      ],
      "principle": "持久化 Taint + 二次触发意图极宽泛 = 杀伤半径极大"
    },
    "B_single_source_sink_pair": {
      "count": 3,
      "kept": [
        "AP-2006",
        "AP-2007",
        "AP-2008"
      ],
      "demoted": [],
      "principle": "PE 直接命中 Sink · 无持久化中转 · 不需要 Taint"
    },
    "D_unreachable": {
      "count": 2,
      "unreachable": [
        "AP-2013 T1",
        "AP-2014 T8"
      ],
      "principle": "v2_Profile 结构性缺失 或 本体论铁律不可达"
    }
  },
  "id_mapping_table": {
    "AP-2001": "原 AP-014",
    "AP-2002": "原 AP-007",
    "AP-2003": "原 AP-010",
    "AP-2004": "原 AP-004",
    "AP-2005": "原 AP-006",
    "AP-2006": "原 AP-015 v3",
    "AP-2007": "原 AP-001",
    "AP-2008": "原 AP-009 v2",
    "AP-2009": "原 AP-003",
    "AP-2010": "原 AP-002 demoted",
    "AP-2011": "原 AP-007A demoted",
    "AP-2012": "原 AP-011 demoted",
    "AP-2013": "原 T1_unreachable",
    "AP-2014": "原 AP-000 T8"
  },
  "d80_next_priorities": [
    "D80 重编号完成 · 14 AP 重新编号 AP-2001~2014",
    "⚠️ 公域·商家 (Inject L2) 缺替代 AP-008 已删 → 待设计替代",
    "下一步 (可选): 深入未覆盖 L2 sink 函数（Harm 当前 9/42 · 目标 30/42）",
    "或 跨 TC 验证（用 MockAgent 跑 AP-2001 / AP-2002 实测）"
  ],
  "d86_status": "✅ T1 + T8 从 0% 覆盖升级为 AP-2015 + AP-2016 覆盖 · 8/8 L1 (100%)",
  "total_aps_fixture_grounded": 2,
  "v34_status": "applied · AP-2501/AP-2502 fixture_grounded 类别新增 · T1+T8 升级 AP-2015/AP-2016 进入 kept · 三面覆盖率重算",
  "overall_coverage": {
    "inject": "7/8 L2 (88%)",
    "taint": "7/8 T1-T8 (88%) · T1+T8 升级后",
    "harm": "8/8 主桶 (100%)",
    "ap_count": "16 (11 kept + 3 demoted + 2 fixture_grounded)"
  }
}