zhanghongyu_0626
4b8e11c9bd
- Added `ThresholdRepository` for managing customer loss threshold configurations and notifications. - Introduced `threshold_service` to handle loss threshold alerts based on customer portfolio performance. - Enhanced `customer_prompts` to include new intent for querying product net values. - Updated `customer_service` to integrate new threshold alert functionality into existing workflows. - Implemented `sanitize_postprocess` for improved compliance handling in customer interactions. - Enhanced course documentation to reflect updates in advisor training modules and interactive elements. This update significantly improves the customer experience by providing proactive loss threshold notifications and enhancing the overall service framework.
84 lines
4.5 KiB
HTML
84 lines
4.5 KiB
HTML
<section class="module" id="module-4">
|
||
<div class="module-inner">
|
||
<p class="eyebrow animate-in">模块 4 · 生产认知</p>
|
||
<h1 class="module-title animate-in">审计只 INSERT<br>Redis 6380 与 fail-open</h1>
|
||
<p class="module-lead animate-in">
|
||
共用底座课讲了双栈鉴权与 input_guard，这模块补<strong>生产环境行为</strong>和<strong>画像/cache 接缝</strong>——
|
||
指挥 AI 改「吊销 fail-closed」或「审计可改」前必看。
|
||
</p>
|
||
|
||
<div class="screen animate-in">
|
||
<h2>G-02：审计表只 INSERT</h2>
|
||
<p><code>audit_log</code> · <code>input_guard_log</code> · <code>risk_suitability_log</code> 等合规留痕表<strong>禁止 UPDATE/DELETE</strong>。任何「改历史审计」需求都应被拒绝，改为追加更正记录。</p>
|
||
<div class="callout callout-warning">
|
||
<strong>input_guard 命中：</strong> fail-fast，<strong>不建会话</strong>——和 LangGraph 内 fallback 不同，没有 reply 回合入库。
|
||
</div>
|
||
</div>
|
||
|
||
<div class="screen animate-in">
|
||
<h2>fail-open 与 debug 双闸门</h2>
|
||
<div class="step-cards">
|
||
<div class="step-card">
|
||
<span class="step-num">①</span>
|
||
<p><strong>Redis 会话窗口 fail-open</strong> — Redis 挂了对话仍能回，只是少短期记忆（客服线同样策略）。</p>
|
||
</div>
|
||
<div class="step-card">
|
||
<span class="step-num">②</span>
|
||
<p><strong>jti 吊销 fail-open</strong> — 吊销服务异常时 token 仍可能通过；生产要监控 Redis。</p>
|
||
</div>
|
||
<div class="step-card">
|
||
<span class="step-num">③</span>
|
||
<p><strong>debug 头</strong> — 仅 <code>APP_ENV=development</code> 且<strong>无 RS256 公钥</strong>；生产有公钥时 debug 头失效。</p>
|
||
</div>
|
||
<div class="step-card">
|
||
<span class="step-num">④</span>
|
||
<p><strong>Redis 6380 + RESP2</strong> — Docker 映射 6380；Windows 本机 6379 旧 Redis 3 不兼容。</p>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
|
||
<div class="screen animate-in">
|
||
<h2>L1/L2 热缓存：谁接了谁没接</h2>
|
||
<div class="translation-block">
|
||
<div class="translation-code">
|
||
<span class="translation-label">接缝快照</span>
|
||
<pre><code><span class="code-line">客服 profile_maybe_extract → L1 抽槽 ✓</span>
|
||
<span class="code-line">ProfileHotCache → 部分读 ✓</span>
|
||
<span class="code-line">L2 Repository / 全量 Redis L1 → 开放项</span>
|
||
<span class="code-line">宿主 POST /api/chat 非 customer → 未全接 L1 热缓存</span></code></pre>
|
||
</div>
|
||
<div class="translation-english">
|
||
<span class="translation-label">白话</span>
|
||
<div class="translation-lines">
|
||
<p class="tl">指挥 AI「全 Agent 统一画像 Redis」前，先对 FRAMEWORK 实现状态表。</p>
|
||
<p class="tl">Bearer 全环境优先——pytest 仍用 dev token，但生产必须 RS256 + 禁 debug 头冒充。</p>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
|
||
<div class="quiz-container" id="quiz-shared-m4">
|
||
<div class="quiz-question-block"
|
||
data-correct="option-a"
|
||
data-explanation-right="对。审计表只追加；更正应新 INSERT 带引用 trace，不能 UPDATE 原记录。"
|
||
data-explanation-wrong="改 audit_log 历史行违反 G-02，合规不可接受。">
|
||
<h3 class="quiz-question">运维说「把 audit_log 里错的那条改成正确 decision」，你怎么回？</h3>
|
||
<div class="quiz-options">
|
||
<button class="quiz-option" data-value="option-a" onclick="selectOption(this)">
|
||
<div class="quiz-option-radio"></div><span>不行，追加新审计记录说明更正</span>
|
||
</button>
|
||
<button class="quiz-option" data-value="option-b" onclick="selectOption(this)">
|
||
<div class="quiz-option-radio"></div><span>好，SQL UPDATE 一行</span>
|
||
</button>
|
||
<button class="quiz-option" data-value="option-c" onclick="selectOption(this)">
|
||
<div class="quiz-option-radio"></div><span>好，DELETE 后重插</span>
|
||
</button>
|
||
</div>
|
||
<div class="quiz-feedback"></div>
|
||
</div>
|
||
<button class="quiz-check-btn" onclick="checkQuiz('quiz-shared-m4')">检查答案</button>
|
||
<button class="quiz-reset-btn" onclick="resetQuiz('quiz-shared-m4')">重做</button>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
</section>
|