kb/concepts/ bekommt Areas: layout: fuer concept, Area-Titel aus jedem Type-Spec, Schwellen-Empfehlung im lint (schliesst #59)
Files changed: - CHANGES.md - README.md - VERSION - kb/concepts/Ambient Environment Dependency.md - kb/concepts/Anti-Cramming Heuristic.md - kb/concepts/Audit Trail.md - kb/concepts/BM25.md - kb/concepts/Bulk Operations.md - kb/concepts/CI Integration.md - kb/concepts/COLLECTION.md - kb/concepts/CPPC.md - kb/concepts/Checkpoint Audit.md - kb/concepts/Claude Code Auto Mode.md - kb/concepts/Command Round-Trip Integrity.md - kb/concepts/Confidence Scoring.md - kb/concepts/Consolidation Tiers.md - kb/concepts/Content Quality Control.md - kb/concepts/Context Isolation.md - kb/concepts/Contradiction Resolution.md - kb/concepts/Cross-platform Agent Skills.md - kb/concepts/Crystallization.md - kb/concepts/Delete Rather Than Anonymize.md - kb/concepts/Denylist over Allowlist.md - kb/concepts/Detect-Repair Asymmetry.md - kb/concepts/Diff-Reviewable Agent Edits.md - kb/concepts/Dual Licensing by File Plan.md - kb/concepts/Entity Extraction.md - kb/concepts/Episodic Memory.md - kb/concepts/Event-Driven Automation.md - kb/concepts/Filter on Ingest.md - kb/concepts/Forgetting.md - kb/concepts/Graph Traversal.md - kb/concepts/Green Suite Blind Spot.md - kb/concepts/Hooks.md - kb/concepts/Hybrid Search.md - kb/concepts/INDEX.md - kb/concepts/Implementation Spectrum.md - kb/concepts/Index Scaling.md - kb/concepts/Issue Label Scheme.md - kb/concepts/Iteration and Cost Limits.md - kb/concepts/KB Migration.md - kb/concepts/KB Stack Versioning.md - kb/concepts/Knowledge Compounding.md - kb/concepts/Knowledge Graph.md - kb/concepts/LLM Wiki Pattern.md - kb/concepts/Lint Workflow.md - kb/concepts/MCP-Leseserver.md - kb/concepts/Mass-Update Gate.md - kb/concepts/Memory Lifecycle.md - kb/concepts/Mesh Sync.md - kb/concepts/Modbus.md - kb/concepts/Multi-Agent Collaboration.md - kb/concepts/Naming Convention Conflict.md - kb/concepts/OKF Compatibility.md - kb/concepts/Optional Instance Context File.md - kb/concepts/Personalization Plane.md - kb/concepts/Privacy and Governance.md - kb/concepts/Procedural Memory.md - kb/concepts/Publish-Remote Gate.md - kb/concepts/Quality Scoring.md - kb/concepts/Quality and Self-Correction.md - kb/concepts/RAG.md - kb/concepts/Reciprocal Rank Fusion.md - kb/concepts/SSD TRIM.md - kb/concepts/Scale Ceiling.md - kb/concepts/Self-Healing.md - kb/concepts/Semantic Lint Automation.md - kb/concepts/Semantic Memory.md - kb/concepts/Session Orientation.md - kb/concepts/Shared vs Private.md - kb/concepts/Split Merge Reclassify.md - kb/concepts/Split Threshold.md - kb/concepts/Structural Enforcement over Documented Rule.md - kb/concepts/Stub Threshold.md - kb/concepts/Supersession.md - kb/concepts/Three-Layer Architecture.md - kb/concepts/Token Economics.md - kb/concepts/Typed Relationships.md - kb/concepts/User Management.md - kb/concepts/Vector Search.md - kb/concepts/Work Coordination.md - kb/concepts/Workflow Extraction.md - kb/concepts/Workflow Orchestration.md - kb/concepts/Working Memory.md - kb/concepts/Write-Once Frontmatter Fields.md - kb/concepts/architectures/Consolidation Tiers.md - kb/concepts/architectures/Context Isolation.md - kb/concepts/architectures/Cross-platform Agent Skills.md - kb/concepts/architectures/Episodic Memory.md - kb/concepts/architectures/Hybrid Search.md - kb/concepts/architectures/Implementation Spectrum.md - kb/concepts/architectures/Knowledge Graph.md - kb/concepts/architectures/LLM Wiki Pattern.md - kb/concepts/architectures/MCP-Leseserver.md - kb/concepts/architectures/Memory Lifecycle.md - kb/concepts/architectures/OKF Compatibility.md - kb/concepts/architectures/Optional Instance Context File.md - kb/concepts/architectures/Personalization Plane.md - kb/concepts/architectures/Procedural Memory.md - kb/concepts/architectures/RAG.md - kb/concepts/architectures/Scale Ceiling.md - kb/concepts/architectures/Semantic Memory.md - kb/concepts/architectures/Three-Layer Architecture.md - kb/concepts/architectures/Token Economics.md - kb/concepts/architectures/Working Memory.md - kb/concepts/decisions/Delete Rather Than Anonymize.md - kb/concepts/decisions/Denylist over Allowlist.md - kb/concepts/decisions/Diff-Reviewable Agent Edits.md - kb/concepts/decisions/Dual Licensing by File Plan.md - kb/concepts/decisions/Issue Label Scheme.md - kb/concepts/decisions/KB Stack Versioning.md - kb/concepts/decisions/Structural Enforcement over Documented Rule.md - kb/concepts/patterns/Audit Trail.md - kb/concepts/patterns/BM25.md - kb/concepts/patterns/Command Round-Trip Integrity.md - kb/concepts/patterns/Confidence Scoring.md - kb/concepts/patterns/Contradiction Resolution.md - kb/concepts/patterns/Entity Extraction.md - kb/concepts/patterns/Filter on Ingest.md - kb/concepts/patterns/Forgetting.md - kb/concepts/patterns/Graph Traversal.md - kb/concepts/patterns/Mesh Sync.md - kb/concepts/patterns/Quality Scoring.md - kb/concepts/patterns/Reciprocal Rank Fusion.md - kb/concepts/patterns/Self-Healing.md - kb/concepts/patterns/Shared vs Private.md - kb/concepts/patterns/Typed Relationships.md - kb/concepts/patterns/Vector Search.md - kb/concepts/patterns/Work Coordination.md - kb/concepts/problems/Ambient Environment Dependency.md - kb/concepts/problems/Detect-Repair Asymmetry.md - kb/concepts/problems/Green Suite Blind Spot.md - kb/concepts/problems/Naming Convention Conflict.md - kb/concepts/problems/Write-Once Frontmatter Fields.md - kb/concepts/protocols/CPPC.md - kb/concepts/protocols/Modbus.md - kb/concepts/protocols/SSD TRIM.md - kb/concepts/workflows/Anti-Cramming Heuristic.md - kb/concepts/workflows/Bulk Operations.md - kb/concepts/workflows/CI Integration.md - kb/concepts/workflows/Checkpoint Audit.md - kb/concepts/workflows/Claude Code Auto Mode.md - kb/concepts/workflows/Content Quality Control.md - kb/concepts/workflows/Crystallization.md - kb/concepts/workflows/Event-Driven Automation.md - kb/concepts/workflows/Hooks.md - kb/concepts/workflows/Index Scaling.md - kb/concepts/workflows/Iteration and Cost Limits.md - kb/concepts/workflows/KB Migration.md - kb/concepts/workflows/Knowledge Compounding.md - kb/concepts/workflows/Lint Workflow.md - kb/concepts/workflows/Mass-Update Gate.md - kb/concepts/workflows/Multi-Agent Collaboration.md - kb/concepts/workflows/Privacy and Governance.md - kb/concepts/workflows/Publish-Remote Gate.md - kb/concepts/workflows/Quality and Self-Correction.md - kb/concepts/workflows/Semantic Lint Automation.md - kb/concepts/workflows/Session Orientation.md - kb/concepts/workflows/Split Merge Reclassify.md - kb/concepts/workflows/Split Threshold.md - kb/concepts/workflows/Stub Threshold.md - kb/concepts/workflows/Supersession.md - kb/concepts/workflows/User Management.md - kb/concepts/workflows/Workflow Extraction.md - kb/concepts/workflows/Workflow Orchestration.md - kb/index.md - kb/log.md - tools/CONTRACT.md - tools/README.md - tools/chemenu/catalog.py - tools/chemenu/commands/index_build.py - tools/chemenu/lint_core.py - tools/chemenu/tests/conftest.py - tools/chemenu/tests/test_cite_cmd.py - tools/chemenu/tests/test_git_publish.py - tools/chemenu/tests/test_index_build.py - tools/chemenu/tests/test_lint.py - tools/chemenu/tests/test_new_page.py - tools/chemenu/tests/test_provenance.py - tools/chemenu/tests/test_type_resolver.py - tools/chemenu/tests/test_xref.py - types/concept.md - types/type-spec.md
This commit is contained in:
@@ -0,0 +1,154 @@
|
||||
---
|
||||
type: types/concept.md
|
||||
concept_type: workflow
|
||||
tags: [privacy, security, governance, audit]
|
||||
created: 2026-07-26
|
||||
modified: 2026-08-29
|
||||
related:
|
||||
- exemplifies: LLM Wiki Pattern
|
||||
- see-also: Filter on Ingest
|
||||
- see-also: Audit Trail
|
||||
- see-also: Bulk Operations
|
||||
sources: [Source - LLM Wiki v2]
|
||||
confidence: 0.90
|
||||
confidence_base: 0.90
|
||||
provenance: sourced
|
||||
summary: Rahmenwerk zur Absicherung von Wiki-Inhalten über Datenfilterung beim Ingest, Audit-Trail-Protokollierung und umkehrbare Massenoperationen.
|
||||
---
|
||||
# Privacy and Governance
|
||||
|
||||
**Typ:** Workflow (Knowledge Security and Accountability)
|
||||
|
||||
## Definition
|
||||
|
||||
Privacy and Governance behandelt die Realität, dass **Quellen oft sensitive Informationen enthalten** (API-Schlüssel, Anmeldedaten, private Gespräche, PII) und dass Wiki-Operationen **Nachverfolgbarkeit und Umkehrbarkeit** benötigen. Das ursprüngliche Pattern erwähnt dies nicht, aber es ist kritisch für die Produktionsnutzung.
|
||||
|
||||
## Kernpunkte
|
||||
|
||||
### Das Problem
|
||||
|
||||
Ohne Privacy und Governance:
|
||||
- Sensitive Daten (API-Schlüssel, Passwörter, Token) können in das Wiki erfasst werden
|
||||
- Private Gespräche oder PII können offengelegt werden
|
||||
- Kein Datensatz darüber, wer was und wann geändert hat
|
||||
- Keine Möglichkeit, Massenoperationen rückgängig zu machen
|
||||
- Keine Rechenschaftspflicht für Wiki-Änderungen
|
||||
|
||||
### Die Lösung: Drei Ebenen
|
||||
|
||||
**1. Filterung beim Erfassen**
|
||||
Bevor etwas in das Wiki gelangt, **sensitive Daten automatisch entfernen**:
|
||||
|
||||
**Filterkategorien:**
|
||||
- **API-Schlüssel und Token:** AWS-Schlüssel, GitHub-Token, Datenbankpasswörter, etc.
|
||||
- **Anmeldedaten:** Benutzernamen, Passwörter, Secrets
|
||||
- **PII:** Persönlich identifizierbare Informationen (E-Mail, Telefon, Adresse, SSN)
|
||||
- **Private Gespräche:** Slack-Nachrichten, interne E-Mails
|
||||
- **Markiert als privat:** Alles, das explizit als privat/vertraulich markiert ist
|
||||
|
||||
**Implementierung:**
|
||||
- Regex-basierte Mustererkennung
|
||||
- ML-basierte PII-Erkennung
|
||||
- Zulassungs-/Blockliste für spezifische Muster
|
||||
- **Automatisch, nicht manuell** - dies muss automatisch geschehen
|
||||
|
||||
**Beispielmuster zum Filtern:**
|
||||
```
|
||||
- AWS: AKIA[0-9A-Z]{16,}
|
||||
- GitHub: ghp_[0-9a-zA-Z]{36,}
|
||||
- Generic API key: [a-zA-Z0-9]{32,}
|
||||
- Email: [a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}
|
||||
- Credit card: \d{4}[\s-]?\d{4}[\s-]?\d{4}[\s-]?\d{4}
|
||||
```
|
||||
|
||||
**2. Audit Trail**
|
||||
Jede Operation im Wiki sollte **protokolliert** werden mit:
|
||||
|
||||
| Feld | Beschreibung | Beispiel |
|
||||
|-------|-------------|---------|
|
||||
| Zeitstempel | Wann die Operation auftrat | 2026-07-26 14:30:00 |
|
||||
| Operationstyp | ingest, edit, delete, query | ingest |
|
||||
| Benutzer/Agent | Wer die Operation durchführte | Mistral Vibe |
|
||||
| Ziel | Was wurde geändert | raw/articles/Source - LLM Wiki v2.md |
|
||||
| Beschreibung | Was geändert wurde und warum | Ingested LLM Wiki v2 article |
|
||||
| Metadaten | Zusätzlicher Kontext | Source type: article |
|
||||
|
||||
**Protokollformat:** Nur anfügen (log-Einträge niemals ändern)
|
||||
|
||||
**Implementierung:**
|
||||
- Zentrales `kb/log.md` für alle Operationen
|
||||
- Strukturiertes Format für einfaches Parsing
|
||||
- Vorher/Nachher für Änderungen einschließen
|
||||
- Link zu verwandten Seiten
|
||||
|
||||
**Anwendungsfälle:**
|
||||
- Wenn etwas falsch aussieht: "Wie ist das hierher gekommen?"
|
||||
- Bei der Untersuchung der Knowledge-Evolution
|
||||
- Beim Debugging von Wiki-Problemen
|
||||
- Für Compliance und Rechenschaftspflicht
|
||||
|
||||
**3. Massenoperationen mit Governance**
|
||||
Wenn das Wiki wächst, sind Massenoperationen durchzuführen:
|
||||
|
||||
| Operation | Beschreibung | Governance |
|
||||
|-----------|-------------|------------|
|
||||
| Massenlöschung | Alte Inhalte entfernen | Geprüft, umkehrbar |
|
||||
| Export | Subset des Wiki exportieren | Geprüft |
|
||||
| Merge | Duplizierte Entities zusammenführen | Geprüft, umkehrbar |
|
||||
| Archiv | Alte Inhalte archivieren | Geprüft, umkehrbar |
|
||||
|
||||
**Governance-Anforderungen:**
|
||||
- **Geprüft:** Jede Massenoperation im Audit Trail protokolliert
|
||||
- **Umkehrbar:** Möglichkeit, Massenoperationen rückgängig zu machen
|
||||
- **Genehmigt:** Menschliche Genehmigung für destruktive Operationen erforderlich
|
||||
- **Begrenzt:** Möglichkeit, Massenoperationen auf spezifische Kategorien zu beschränken
|
||||
|
||||
## Implementierung
|
||||
|
||||
Basierend auf [[Agent Memory]] und Produktionserfahrung:
|
||||
|
||||
1. **Filterung vor dem Erfassen:** Automatische sensitive Datenenfernung
|
||||
2. **Überprüfung nach dem Erfassen:** Manuelle Stichprobenprüfung erfasster Inhalte
|
||||
3. **Zentrales Protokollieren:** Alle Operationen zu `kb/log.md`
|
||||
4. **Umkehrbare Operationen:** Undo/Redo für alle Änderungen implementieren
|
||||
5. **Zugriffskontrolle:** Optionale Benutzer-/Agent-Berechtigungen
|
||||
|
||||
## Vorteile
|
||||
|
||||
- **Sicherheit:** Sensitive Daten betreten das Wiki nie
|
||||
- **Compliance:** Erfüllt Datenschutzanforderungen
|
||||
- **Rechenschaftspflicht:** Vollständiger Audit Trail aller Änderungen
|
||||
- **Sicherheit:** Massenoperationen sind umkehrbar
|
||||
- **Vertrauen:** Benutzer können Wiki-Integrität überprüfen
|
||||
|
||||
## Wann zu verwenden
|
||||
|
||||
- Jedes produktive Wiki
|
||||
- Wikis mit sensiblen Daten
|
||||
- Multi-User-Umgebungen
|
||||
- Compliance-sensitive Domänen
|
||||
|
||||
## Wann NICHT zu verwenden
|
||||
|
||||
- Persönliche, nicht-sensitive Wikis
|
||||
- Vollständig vertrauenswürdige Umgebungen
|
||||
- Situationen, in denen der Overhead nicht gerechtfertigt ist
|
||||
|
||||
## Verwandte Concepts
|
||||
|
||||
- [[Event-Driven Automation]] - Für automatisierte Governance
|
||||
|
||||
## Siehe auch
|
||||
|
||||
- [[Privacy and Governance]] (diese Seite)
|
||||
- [[Multi-Agent Collaboration]] (für Multi-Agent-Sicherheit)
|
||||
- [[Quality and Self-Correction]] (für Qualitätsaspekte)
|
||||
|
||||
<!-- wikitool:links -->
|
||||
## Beziehungen
|
||||
|
||||
- **exemplifies:** [[LLM Wiki Pattern]]
|
||||
- **see-also:** [[Filter on Ingest]]
|
||||
- **see-also:** [[Audit Trail]]
|
||||
- **see-also:** [[Bulk Operations]]
|
||||
<!-- /wikitool:links -->
|
||||
Reference in New Issue
Block a user