Unverified50% confidenceDecision RuleExact time
The recorder should use whitelisted commands and refuse to execute when encountering an unknown job key (e.g., raise SystemExit), and text proposed by the model must not be allowed to make the recorder add a new key.
1
Sources
50%
Confidence
Long-term
Relevance
10/13/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedThe ledger adopts a fail-closed (default deny) core principle: execution is refused unless the patch is proven to stay within the whitelist.59% similarUnverified在OAuth 2.0等主流授权框架中，客户端请求令牌时必须声明所需权限范围（scope），服务端颁发受限令牌，超出声明范围的操作会被拒绝58% similarUnverifiedThe first line of defense requires validating required fields (ID, company, email) before calling the AI, treating empty strings as missing; invalid records are immediately rejected, consuming no model calls and receiving no qualification score.58% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1017199API
curl https://kongchang.com/api/v1/knowledge/claims/1017199MCP
get_claim(id=1017199)