---
id: shared-enforced
kind: enforced
gate: shared-gate
title: 共享确定性底线
sync_policy: engine_only
status: active
extra:
  owner_mechanism: mc-stage-gate-engine
checks:
  - id: SEC-01
    executor: regex_pattern_scan
    rule: "禁止在有效项目文件中提交私钥内容（含 BEGIN PRIVATE KEY 头）"
    severity: error
    check_type: deterministic
    pattern: '/-----BEGIN (RSA |EC |DSA |OPENSSH |)PRIVATE KEY-----/'
    languages: ["通用"]
    non_waivable: true
    gate: shared-gate
    target: self
  - id: SEC-02
    executor: regex_pattern_scan
    rule: "识别疑似硬编码高熵密钥或密码；命中须修复或确认为非密钥（如测试 fixture），不可豁免。v-model 绑定形态排除（2026-08-27 误报治理：v-model:password=\"form.password\" 是 Vue 变量绑定非字面量，JS 变长后行断言同时覆盖 v-model:password 与 v-model:new-password）"
    severity: error
    check_type: deterministic
    pattern: "/(?<!v-model:[\\w-]*)(password|passwd|secret|api[_-]?key|access[_-]?key|private[_-]?key|auth[_-]?token)\\s*[:=]\\s*[\"'][^\"'\\s]{12,}/i"
    languages: ["通用"]
    non_waivable: true
    gate: shared-gate
    target: self
---

# shared-gate 确定性底线

共享规则只保留跨技术栈仍可可靠判断的秘密泄露检查。构建、部署、HTTP、框架、风格和安全策略由对应产物、项目命令或项目级规则在其真实适用范围内执行。