宝玉 (@dotey)T2·78 pts
- Treats AI models as 'insider risks,' requiring identity, permission limits, and logging similar to high-privilege employees.
- Architectural principle separates 'providing intelligence' from 'controlling intelligence,' ensuring models cannot alter their own permission constraints.
- Outlines seven specific principles, notably banning single-model dependency (diversity), assuming compromise by default (isolation), and mandating transparent Chain-of-Thought.