perf/security(backend): P0/P1 hardening pass (v0.7.1)
P0:
- ApiExceptionHandler: 500 fallback never leaks internals (stack to server log only), DuplicateKeyException -> 409, bean/param validation kept at 400 explicitly
- CaseRuntimeStore: evict settled cases (closed/archived/emergency) so cache size tracks active cases, no unbounded growth
- GET /api/tasks?assigneeId=: joined open-task view (task + clue summary) via TaskQueryService; mobile TasksView switches from 4+N requests to a single request
P1:
- whitelist patterns on all request fields (clueId/sourceType/zoneId/ participantId/reason/assigneeId) - control chars stopped at edge
- INFO logs on intake/feedback/close/archive write paths
- indexes: task_assignment(assignee_id,state), clue_case(status)
verified: 25 backend tests green; live smoke (400/409/log/join); frontend typecheck + single-request behavior in browser
Co-authored-by: Cursor cursoragent@cursor.com
基于 CrowdOS Kernel 与受控大模型的公共空间高峰时段轻异常线索群智核验、任务链调度与质量优化系统。Kernel 增强(联合评分派发/质量闸门/双层状态机)+ 受控 LLM 结构化 + Spring Boot 演示后端
版权所有:中国计算机学会技术支持:开源发展技术委员会
京ICP备13000930号-9
京公网安备 11010802047560号
# CrowdGuard 项目索引
项目定位
本项目面向大型公共空间高峰时段的轻异常线索核验与协同处置。系统基于 CrowdOS Kernel 将低置信度现场线索转化为可核验、可协同、可复盘的任务链,通过位置、时间、角色、负载、可信度等约束完成动态参与者选择、多人核验、处置复核和质量控制。
校园大型活动、景区高峰、活动场馆、商场活动日和开放式文旅街区都可以作为同构场景;第一版可以用校园大型活动或模拟公共空间高峰作为演示壳,但产品边界不再限定为校园。
LLM 仅作为受控辅助层,用于线索结构化、任务卡生成、核验清单生成和反馈摘要,不做最终风险定级、身份识别或处置裁决。
当前目标
先完成一个小范围、可演示、可复现的试点原型:
目录导航
00_contest/competition-summary.md01_product/product-goal.md,demo-shell-selection.md,feasibility-innovation-assessment.md,lifecycle-plan.md,roadmap.md,external-ai-research-tasks.md,research-report-review-2026-06-08.md02_architecture/system-overview.md03_crowdos/integration-plan.md,kernel-scan-report.md04_data/data-dictionary.md,sample-data-readme.md,sample-clues-campus-career-fair.jsonl05_code/README.md,project-structure.md,engineering-standards.md,environment-setup.md06_tests/test-plan.md,evaluation-plan.md07_delivery/submission-checklist.md08_records/version-map.md,result-log.md,decision-log.md,next-actions.mdscripts/README.md版本记录规则
每次形成一个可说明的结果,都要在
08_records/result-log.md记录:v0.1.0版本与成果的总览写在
08_records/version-map.md,避免后面分不清某个结果来自哪个版本。文件放置规则
00_contest/。01_product/。01_product/external-ai-research-tasks.md。02_architecture/。03_crowdos/。04_data/。05_code/,不要散落在根目录。05_code/。06_tests/。07_delivery/。08_records/。不做范围