能力要主动，
边界要明确。Proactive capability.
Explicit boundaries.

• 每个账号由服务端会话确定身份，客户端不能用自定义用户编号切换数据归属。Server sessions determine identity; clients cannot switch data ownership with a self-declared user ID.
• 不同设备使用独立会话令牌，同一账号可跨设备共享目标与建言，并能撤销单台设备。Devices use separate session tokens. One account can share goals and counsel across devices while allowing per-device revocation.
• 业务数据按账号隔离，跨账号对象不向请求方暴露是否存在。Business data is isolated by account, and cross-account objects do not disclose their existence to the requester.

Windows 使用系统级凭据保护保存会话；Android 使用系统密钥库保护认证信息。账号切换会停止旧任务并清理不应进入新账号的本地队列和缓存。录屏仍需操作系统逐次授权，不能静默绕过。Windows protects stored sessions with operating-system credential protection; Android uses the system keystore. Account switching stops stale work and clears local queues or caches that must not cross into the new account. Screen capture still requires operating-system authorization and cannot be silently bypassed.

客户端只应向登录时绑定的 HTTPS 服务地址发送账号凭据和内容；跨域或降级重定向会被拒绝。模型调用有每用户与全局配额、并发限制和审计，以降低滥用与失控费用。Clients should send credentials and content only to the HTTPS service origin bound at sign-in; cross-origin or downgrade redirects are rejected. Model calls are subject to per-user and global quotas, concurrency controls and audits to limit abuse and uncontrolled cost.

云端分析不是“所有数据永不离开设备”。开启后，分析所需片段可能进入谋臣服务器和配置的模型服务。完整原文上传必须作为单独选择；常见密码、令牌、私钥和银行卡信息仍会经过净化规则。Cloud analysis is not a promise that all data stays on-device. When enabled, required excerpts may reach Mouchen servers and configured model providers. Full-text upload is a separate choice, while common passwords, tokens, private keys and payment-card data remain subject to outbound filtering.

• 密码输入框与系统标记的安全窗口；password fields and operating-system secure windows;
• 未显示在当前界面的聊天或应用历史；chat or app history not shown in the current interface;
• 其他应用沙箱内的私有或加密数据库；private or encrypted databases inside another app’s sandbox;
• DRM、FLAG_SECURE 或平台禁止捕获的画面和内部音频；screens or internal audio protected by DRM, FLAG_SECURE or platform capture restrictions;
• 未经用户启动和系统授权的永久后台录屏。permanent background screen capture without user initiation and system permission.

谋臣可以提出下一步或准备操作草案，但付款、发消息、修改账户、删除外部数据等高影响或不可逆操作需要用户明确确认。私测阶段不承诺无人监管的自动执行。Mouchen may recommend a next step or prepare an action draft, but payments, messages, account changes, deletion of external data and other consequential or irreversible actions require explicit user confirmation. The private alpha does not promise unsupervised autonomous execution.

如发现越权、数据串线、凭据泄露或可被利用的漏洞，请不要公开利用。将复现范围、客户端版本和时间发送至：If you discover unauthorized access, cross-account data exposure, credential leakage or an exploitable vulnerability, please do not exploit it publicly. Send the reproduction scope, client version and time to:

ceo@yuhandigital.com

我们会确认收到并根据风险优先处理。请不要在报告中附带与漏洞无关的真实用户原文。We will acknowledge receipt and prioritize according to risk. Do not include unrelated real user content in a report.