Naúrar 5 / 11

Logging, Hanyar Audit da Tabbatarwa

Riba:

  • Ikon tsara mafi ƙarancin tsarin bin diddigin wanda ya isa ya sake gina taron
  • Ikon hana log ɗin zama tushen zubewa ta hanyar rufe hanzari/amsa
  • Ikon kafa rajistan ayyukan tantancewa tare da ainihin alaƙa, rashin canzawa da lokacin riƙewa

A cikin tsarin AI, wata rana za a yi tambaya: "Me ya sa aka yanke shawarar haka, menene ainihin ya faru a wannan rana?" Wannan tambaya na iya zama abokin ciniki, mai bincike, mai gudanarwa, ko kotu. Amsar ku ko dai ta zama hanyar tantancewa ko kuma "ba mu sani ba." Ƙarshen ba shi da karɓa a cikin yanayin kamfani. A cikin wannan rukunin, za mu koyi abin da ya kamata kuma bai kamata a shigar da shi musamman ga AI ba, yadda ake kafa hanyar tantancewa, da yadda ake kiyaye rajistan ayyukan tare da tsaro da sirri.

Me yasa Shiga ya bambanta a AI?

A cikin software na gargajiya, "wanda ya yi abin" yana shiga. A cikin AI, an ƙara sabbin nau'ikan abubuwa uku zuwa wannan: wane samfuri / sigar da aka yi amfani da shi, menene aka aiko da gaggawa, da wane amsa aka samar. Lokacin da kuskure ko korafi ya faru, ba za ku iya sake gina lamarin ba tare da waɗannan ukun ba. Amma wannan saurin/amsa na iya ƙunsar PII, kamar yadda muka gani a raka'a 2 - ma'ana log ɗin kanta na iya zama tushen leaks. Wannan ita ce fasahar daidaitawa.

Tsanaki: Shiga ba "log komai ba". Yawan sare-tsalle yana haifar da haɗari na sirri, kuma ɗan guntun katako yana haifar da rashin shaida. Manufar ita ce kiyaye isasshen PII don sake gina taron ta hanyar rufe shi.

Menene ya kamata a shiga? Tsare-tsare Tsare-tsare

Ingantacciyar hanyar duba AI ta ƙunshi, aƙalla:

  • Wanene: ID na mai amfani da rawar (ko ID ɗin sabis).
  • Lokacin: Tambarin lokaci (apparawa-kawai idan zai yiwu).
  • Menene: Ayyukan da ake so da kayan aikin da aka kira.
  • Wanne samfurin: Sunan samfuri da sigar (misali claude-opus-4-8), sigogi masu mahimmanci kamar zafin jiki.
  • Narkar da shigarwa/fitarwa: Narkar da abin rufe fuska ko narkar da/hash na buƙatu da amsa.
  • Shawara: An sarrafa ta kai tsaye, an je wurin mutum, an amince da shi ko an ƙi?
  • Sakamako: Shin aikin ya yi nasara ko kuskure, wace hanya ta shafi?

Mataki-mataki: Ƙirƙirar Hanyar Audit

  1. Saita manufa. Wanene zai karanta waɗannan rajistan ayyukan kuma me yasa? (Amsar aukuwa, bin diddigin bin doka, gyara kurakurai.) Manufar ita ce ke ƙayyade abin da kuke kiyayewa.
  2. Ƙaddamar da manufofin PII. Rufe saƙon gaggawa/amsa kafin shiga (raka'a 2).
  3. Samar da rashin iya canzawa. Bari mahimman rajistan ayyukan su kasance a haɗa-kawai; Babu wanda ya isa ya goge abin da ya gabata shiru.
  4. Ƙayyade lokacin riƙewa. Ƙayyade tsawon lokaci bisa ga ma'auni na buƙatun doka da sirri; Share ta atomatik lokacin da lokaci ya ƙare.
  5. Iyakance shiga Hakanan ya kamata a kiyaye damar shiga rajistan ayyukan tare da RBAC; Hakanan ya kamata a shigar da karatun log.
  6. Ƙara ID ɗin daidaitawa (ID). Haɗa duk matakan buƙatun (shigarwa, kiran kayan aiki, tabbatarwa, fitarwa) tare da ainihi ɗaya.

Samfura guda huɗu masu Kwafi

Shirye-shiryen rajistar rajista (JSON):

{"trace_id": "...", "lokaci": "YYYY-MM-DDThh:mm:ssZ", "mai amfani": "...", "rawar": "...", "model": "claude-opus-4-8", "parameters": {"zazzabi": 0 }, "request_summary": "request_summary": "<y taƙaitawa:" "<masked>", "kayan aiki": ["tool_a", "tool_b"], "yanke shawara": "auto| yarda_human", "amincewa": "an yarda|an ƙi|babu", "sakamako": "nasara

Shigar da saƙon sarrafa PII:

Duba misalan log ɗin da ke ƙasa. Shin filayen da ake buƙata don hanyar tantancewa (wanda, yaushe, samfuri, yanke shawara, sakamako) sun cika? Hakanan an fitar da danyen PII? Ga kowane jere, bayar da rahoto azaman: "bai isa / bacewar sarari: ... /PII leak: ..." <logs>{{misali }}</logs>

Saurin sake gina taron:

Bayanan tantancewa masu zuwa na cikin trace_id guda ɗaya ne. Juya taron zuwa labari a cikin tsari na lokaci-lokaci: menene mai amfani yake so, menene samfurin ya yi, menene ingantaccen aiki, yaya aka yanke shawarar, menene sakamakon? Tuta ta ɓace ko matakan da ba daidai ba.<rikodi>{{trace_registers }}</ records>

Dokokin yanke shawarar tsarewa:

Ga kowane nau'in log ɗin, ƙayyade: - Akwai wajibcin riƙewa na doka? (mafi ƙarancin lokacin idan akwai) - Shin yana ɗauke da PII? (idan an haɗa, rage tsawon lokaci, taƙaita damar shiga) - Tabbacin abin da ya faru na tsaro? (kantin sayar da kaya ba za a iya canza) Sakamako: "store N days + append-only mi + access level".

Rauni Mai Sauƙi / Ƙarfi Mai ƙarfi

rashin tsari

Hanya mai ƙarfi

Ba shiga kwata-kwata ("ba a buƙata")

Shiga mafi ƙarancin saiti don sake gina taron

Shiga cikin ɗanyen gaggawa/amsa kamar yadda yake

Takaitaccen abin rufe fuska + alamar shiga ID

Ajiye rajistan ayyukan ba da iyaka

Lokacin riƙewa tare da ma'auni na doka + keɓewa

Kowa na iya share rajistan ayyukan

Mahimman rajistan ayyukan ƙari ne kawai, ana sarrafa samun dama

Mini Cases guda uku

Harka 1 - Gano ID ya rage binciken rana zuwa mintuna 15. "An ƙi amincewa da aikace-aikacena ba bisa ƙa'ida ba," in ji wani abokin ciniki ga mataimakiyar kima kafin kima na banki. Godiya ga ID ɗin daidaitawa, ƙungiyar ta sake gina shigarwar aikace-aikacen, tabbatattun ma'aikata, da yanke shawara a cikin mintuna 15; ya nuna cewa kuskuren ya faru ne ta hanyar ƙofa marar kuskure a cikin ingantaccen ƙa'ida kuma gyara shi.

Hali na 2 - An gano wuce gona da iri a cikin binciken. Wani kamfani na e-kasuwanci yana rubuta duk tsokaci/amsoshi ga danyen rajistan ayyukan debugging. A yayin binciken na shekara-shekara, an ga cewa waɗannan buƙatun sun ƙunshi adiresoshin abokan ciniki da lambobin tarho kuma an adana su har tsawon shekaru 2. An rufe binciken ta hanyar canzawa zuwa tsarin rufe fuska + 90-days manufofin; An kiyaye aikin bin diddigin.

Shari'a 3 - Ƙirar-kawai kawai ta bayyana cin zarafi na ciki. Wani ma'aikaci a ɗaya daga cikin ma'aikata ya yi ƙoƙarin share rajistan ayyukan don ɓoye kuskuren da ya yi. Tun da rajistan ayyukan append-kawai ne kuma ana yin rikodin yunƙurin karantawa / gogewa, ƙoƙarin ya kasance a bayyane nan da nan; Lamarin ya haifar da ladabtarwa da gyaran tsari.

Tukwici: Sanya ID ɗin daidaitawa (ID ɗin ganowa) ga kowace buƙatu kuma ɗauka ta duk matakai. Lokacin da matsala ta faru, samun damar tattara "komai game da wannan buƙatar" tare da tambaya ɗaya shine babban mai saurin amsa lamarin.

Kuskuren gama gari

  • Ba shiga kwata-kwata, ko shiga kadan ta yadda ba za ku iya sake gina taron ba.
  • Shigar da ɗanyen buƙatar/amsa ba tare da abin rufe fuska ba da kuma juya log ɗin zuwa tushen zubewa.
  • Ba shigar da sunan samfurin / sigar da yanke shawara (na atomatik / ɗan adam).
  • Ajiye rajistan ayyukan na tsawon lokaci mara iyaka yana ƙara haɗarin sirri.
  • Barin mahimman rajistan ayyukan don canzawa; Ba shiga shiga shiga ba.
  • Rashin iya haɗa matakan tare saboda baya amfani da ID ɗin daidaitawa (ID).

A takaice

  • Shigar AI yana ƙara girma uku zuwa "wanda ya yi me": wane samfuri / sigar, wanda ya ba da amsa, wane amsa.
  • Manufar ita ce a kiyaye mafi ƙarancin PII don sake gina taron ta hanyar rufe shi—babu, ba kaɗan ba.
  • Hanyar duba ya kamata ta haɗa da wane/lokacin/mene/wanne samfurin/yanki/filayen sakamako.
  • Mahimman rajistan ayyukan ya kamata a haɗa-kawai, ya kamata a iyakance damar shiga, da kuma shigar da shiga log ɗin.
  • ID ɗin daidaitawa (ID ɗin ganowa) yana haɗa duk matakan buƙata kuma yana hanzarta binciken abin da ya faru.

Aikin aikace-aikace

Zaɓi buƙatun daga kwararar AI ɗin ku kuma rubuta ingantacciyar hanyar duba ta tare da tsarin JSON a sama. Sai ku yi gwaje-gwaje biyu: (1) Za ku iya ba da labarin daga farko har ƙarshe da wannan rikodin? (2) Akwai danyen PII a cikin rikodin? Idan akwai filin da ya ɓace, ƙara shi, idan akwai PII, rufe shi. A ƙarshe, saita lokacin riƙewa da matakin samun dama.

jerin abubuwan dubawa

  • [ ] Hanyar tantancewa ta haɗa da wane/lokacin/mene/samfurin/tsari/filayen sakamako.
  • [ ] Amsar gaggawa ana rufe ta kafin rajistan ayyukan (babu PII).
  • [ ] An sanya ID mai alaƙa (ID) ga kowace buƙata.
  • [ ] Mahimman rajistan ayyukan ƙari ne kawai kuma ana sarrafa samun dama.
  • [ ] An ayyana lokacin ajiya ta hanyar ma'aunin sirri + na doka, kuma ana share shi a ƙarshen lokacin.
  • [ ] Tare da rajistan ayyukan zan iya sake gina wani taron a cikin ƙasa da mintuna 30.