{
  "datasetId": "ai-agent-product-specification-card-v1",
  "schemaVersion": "1.0.0",
  "createdAt": "2026-07-21",
  "language": "zh-CN",
  "license": "https://creativecommons.org/licenses/by/4.0/",
  "licenseScope": "The field structure, Chinese descriptions, review states, and blank record created by DragonAI. Third-party source material is excluded and remains under its original terms.",
  "purposeZh": "用于把 AI Agent 产品的任务、工具、权限、人工控制、循环停止、评测和发布责任连接到可复核证据。",
  "disclosureZh": "DragonAI 运营 AI 产品经理课程。本规格卡是第一方编辑框架，不是统一行业标准、安全认证或项目结果保证。",
  "assessmentMethodZh": "先比较非 Agent 方案；确认需要 Agent 后逐项记录 missing、defined、tested 或 evidenced。任何适用的高风险阻断项未解决时，不得用总体完成率抵消。",
  "reviewStates": [
    {
      "state": "missing",
      "criterionZh": "缺少边界、负责人或证据入口。"
    },
    {
      "state": "defined",
      "criterionZh": "已写规则，但尚无版本化测试。"
    },
    {
      "state": "tested",
      "criterionZh": "已在固定任务与失败切片上运行并保存逐步证据。"
    },
    {
      "state": "evidenced",
      "criterionZh": "测试、复核、发布范围、运行责任与变更触发器均有可访问证据。"
    }
  ],
  "sections": [
    {
      "sectionId": "agent-necessity",
      "nameZh": "Agent 必要性与替代方案",
      "requiredFields": [
        "userTask",
        "currentBaseline",
        "deterministicOption",
        "modelWorkflowOption",
        "agentOption",
        "selectionEvidence",
        "stopCondition"
      ],
      "verificationQuestionsZh": [
        "是否用同一批任务比较不同自治程度？",
        "更简单方案达标时是否停止增加复杂度？"
      ]
    },
    {
      "sectionId": "task-boundary",
      "nameZh": "任务、完成状态与非目标",
      "requiredFields": [
        "authorizedUsers",
        "trigger",
        "allowedGoals",
        "completionState",
        "excludedGoals",
        "prohibitedUses",
        "missingInputBehavior",
        "failureCost"
      ],
      "verificationQuestionsZh": [
        "完成条件能否由外部状态核验？",
        "是否明确哪些结果只能形成草稿？"
      ]
    },
    {
      "sectionId": "tool-identity-permission",
      "nameZh": "工具、身份与最小权限",
      "requiredFields": [
        "toolAllowlist",
        "identity",
        "authorizationSource",
        "objectScope",
        "allowedActions",
        "parameterConstraints",
        "readWriteClass",
        "dataRestrictions",
        "idempotencyKey",
        "compensationAction"
      ],
      "verificationQuestionsZh": [
        "能否复原每次调用使用的身份、对象和参数？",
        "是否测试越权、重复调用和部分成功？"
      ]
    },
    {
      "sectionId": "human-control",
      "nameZh": "人工确认、取消与纠错",
      "requiredFields": [
        "approvalRequiredActions",
        "approverRole",
        "approvalContext",
        "planReview",
        "interruptPath",
        "cancelPath",
        "undoPath",
        "appealPath"
      ],
      "verificationQuestionsZh": [
        "状态变化前是否展示对象、参数、依据和可逆性？",
        "确认人是否拥有对应权限？"
      ]
    },
    {
      "sectionId": "loop-stop-recovery",
      "nameZh": "循环、停止与恢复",
      "requiredFields": [
        "maxSteps",
        "maxRuntime",
        "maxToolCalls",
        "costBudget",
        "retryLimit",
        "retryChangeRequirement",
        "immediateStopSignals",
        "handoffRules",
        "partialSuccessState",
        "rollbackPlan"
      ],
      "verificationQuestionsZh": [
        "同类失败是否可能无限重试？",
        "用户取消和高风险信号能否立即停止后续动作？"
      ]
    },
    {
      "sectionId": "trajectory-evaluation",
      "nameZh": "结果与行动轨迹评测",
      "requiredFields": [
        "taskSetVersion",
        "riskSlices",
        "modelVersion",
        "instructionVersion",
        "toolVersion",
        "trajectoryFields",
        "taskMetrics",
        "actionMetrics",
        "permissionMetrics",
        "recoveryMetrics",
        "criticalFailures",
        "releaseDecision"
      ],
      "verificationQuestionsZh": [
        "是否同时保存最终结果和中间状态变化？",
        "高风险失败是否独立阻断？"
      ]
    },
    {
      "sectionId": "release-operations",
      "nameZh": "受限发布与持续运营",
      "requiredFields": [
        "releaseScope",
        "enabledTools",
        "userCohort",
        "monitoringSignals",
        "alertThresholds",
        "pauseSwitch",
        "incidentOwner",
        "rollbackOwner",
        "retestTriggers",
        "reviewDate"
      ],
      "verificationQuestionsZh": [
        "是否区分部署、采用和用户结果？",
        "模型、工具、权限、数据或用途变化是否触发复测？"
      ]
    }
  ],
  "criticalFailureCandidatesZh": [
    "越权写入",
    "错误对象或错误金额的高影响操作",
    "未经确认的外发或不可逆提交",
    "敏感数据泄露",
    "无法停止的循环",
    "重复执行产生外部影响",
    "失败后无法识别状态或回滚"
  ],
  "blankReviewRecord": {
    "productName": "",
    "version": "",
    "reviewedAt": "",
    "sectionId": "",
    "requiredForUseCase": true,
    "notApplicableReasonZh": "",
    "reviewState": "missing",
    "evidenceUrls": [],
    "testCaseIds": [],
    "blockingFailures": [],
    "owner": "",
    "reviewTrigger": "",
    "questionsRemainingZh": []
  },
  "sources": [
    {
      "evidenceId": "openai-practical-guide-building-agents-20260721",
      "url": "https://openai.com/business/guides-and-resources/a-practical-guide-to-building-ai-agents/"
    },
    {
      "evidenceId": "anthropic-trustworthy-agents-20260721",
      "url": "https://www.anthropic.com/research/trustworthy-agents"
    },
    {
      "evidenceId": "microsoft-entra-agent-authorization-20260721",
      "url": "https://learn.microsoft.com/en-us/entra/agent-id/authorization-agent-id"
    },
    {
      "evidenceId": "nist-ai-rmf-genai-profile-20260721",
      "url": "https://www.nist.gov/publications/artificial-intelligence-risk-management-framework-generative-artificial-intelligence"
    }
  ],
  "title": "AI Agent 产品规格与上线门禁卡 v1",
  "description": "把智能体产品拆成必要性、任务边界、工具身份权限、人工控制、循环停止、行动轨迹评测和受限发布七部分，并提供空白复核记录。",
  "url": "https://course.dragonai.tech/datasets/ai-agent-product-specification-card-v1.json",
  "creator": "烛龙智元内容研究组"
}