feat: 数据出境改"需评估"(不武断判违规) + 报告内置接入运行时指引 v0.7.13

- 境外大模型调用: 控制项 fail→warn,端点severity critical→high/依赖high→medium,标签改"需评估出境"
  (检出是事实,是否违规取决于发什么数据;国内不发敏感数据的项目不再0分D)
- 报告加"接入运行时"段:可复制MCP配置,把"待核验需接入"变成一键可操作

Author: jnMetaCode

CHANGELOG.md

@@ -5,6 +5,12 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/),
 and this project adheres to [Semantic Versioning](https://semver.org/).
 
+## [0.7.13] - 2026-06-21
+
+### Changed — 数据出境改为「需评估」+ 报告内置「接入运行时」指引
+- **境外大模型调用不再武断判「不合规」**：检出"用了 OpenAI/Anthropic"是事实，是否违规取决于是否发送个人信息/重要数据——降为 **🟡 需评估**（控制项 fail→warn，端点 severity critical→high、依赖 high→medium），分类标签改「境外大模型调用（需评估出境）」。国内很多不发敏感数据的项目不再动辄 0 分 D
+- **报告内置「接入运行时」指引**：⚪ 待核验项需 ShellWard 运行时才能验证——报告里直接给**可复制的 MCP 配置**（贴到 Claude Desktop/Cursor 即接入），把"需要接入"变成一键可操作
+
 ## [0.7.12] - 2026-06-21
 
 ### Fixed — 上传报告"返回"失效

package.json

@@ -1,6 +1,6 @@
 {
   "name": "shellward",
-  "version": "0.7.12",
+  "version": "0.7.13",
   "mcpName": "io.github.jnMetaCode/shellward",
   "description": "AI agent security & MCP security middleware — prompt injection detection, AI firewall, runtime guardrails & data-loss prevention for LLM tool calls. 8-layer defense against data exfiltration & dangerous commands. Zero dependencies. SDK + OpenClaw plugin. Supports LangChain, AutoGPT, Claude Code, Cursor, OpenAI Agents, Hermes Agent.",
   "keywords": [

src/compliance/audit.ts

@@ -317,11 +317,12 @@ function checkEnv(c: ComplianceControl, env: EnvFacts): ControlResult {
     if (env.overseas.length > 0) {
       const names = env.overseas.map(o => o.provider_zh).join(', ')
       const namesEn = env.overseas.map(o => o.provider_en).join(', ')
-      return mk(c, 'fail',
-        `检测到境外大模型端点配置: ${names} — 若向其发送个人信息/重要数据即构成数据出境，须走合规路径`,
-        `Overseas LLM endpoint(s) configured: ${namesEn} — sending PI/important data = cross-border export`)
+      // 检出境外调用是"事实"，是否违规取决于是否发送 PII/重要数据 → 标"需评估"而非"不合规"
+      return mk(c, 'warn',
+        `检测到境外大模型调用: ${names}。是否违规取决于发送的数据：涉及个人信息/重要数据需走合规路径或改用境内模型；仅非个人/非重要数据通常可接受。`,
+        `Overseas LLM detected: ${namesEn}. Compliance depends on the data sent — PI/important data needs a compliant path; non-personal data is usually fine.`)
     }
-    return mk(c, 'pass', '未检测到境外大模型端点配置', 'No overseas LLM endpoint detected')
+    return mk(c, 'pass', '未检测到境外大模型调用', 'No overseas LLM detected')
   }
   return mk(c, 'manual', '需人工确认', 'Manual check required')
 }

src/compliance/html-report.ts

@@ -20,7 +20,7 @@ const STATUS: Record<ControlStatus, { zh: string; en: string; cls: string }> = {
 }
 
 const KIND: Record<FindingKind, { zh: string; en: string; icon: string }> = {
-  overseas: { zh: '数据出境风险', en: 'Data export risk', icon: '🌐' },
+  overseas: { zh: '境外大模型调用（需评估出境）', en: 'Overseas LLM (assess export)', icon: '🌐' },
   secret: { zh: '硬编码密钥', en: 'Hardcoded secret', icon: '🔑' },
   pii: { zh: '个人信息暴露', en: 'PII exposure', icon: '🪪' },
   'env-perm': { zh: '.env 权限', en: '.env permission', icon: '📂' },
@@ -192,6 +192,22 @@ export function renderHtmlReport(
     S.push('</tbody></table></div>')
   }
 
+  // ===== 接入运行时指引：把 ⚪ 待核验项变成可验证（回答"需要接入才能测"）=====
+  if (report.staticScan && report.manual > 0) {
+    const cfg = `{
+  "mcpServers": {
+    "shellward": { "command": "npx", "args": ["-y", "-p", "shellward", "shellward-mcp"] }
+  }
+}`
+    S.push(sectionHead('🔌', t('让待核验项可验证：接入运行时', 'Make ⚪ items verifiable: deploy runtime'),
+      t('静态扫描测不了运行时行为，接入后这些项才能被持续验证', 'Static scan cannot test runtime behavior; deploy to validate')))
+    S.push(`<p class="note">${t(
+      `把下面这段加到 Claude Desktop / Cursor / OpenClaw 的 MCP 配置，重启后 ShellWard 就作为<b>运行时防护</b>在你的 AI 应用里运行——上方 ${report.manual} 项（审计留存、运行时拦截、数据外发管控等）即可被真实验证。`,
+      `Add this to your Claude Desktop / Cursor / OpenClaw MCP config and restart — ShellWard then runs as a <b>runtime guard</b>, validating the ${report.manual} ⚪ items above.`)}</p>`)
+    S.push(`<div class="cfg"><pre id="mcpcfg">${esc(cfg)}</pre><button onclick="(function(b){navigator.clipboard&&navigator.clipboard.writeText(document.getElementById('mcpcfg').textContent).then(function(){b.textContent='${t('已复制', 'Copied')}'})})(this)">${t('复制', 'Copy')}</button></div>`)
+    S.push(`<p class="muted">${t('或命令行直接起：', 'Or run directly:')} <code>npx shellward mcp</code> · ${t('文档', 'Docs')}: <a href="https://github.com/jnMetaCode/shellward">github.com/jnMetaCode/shellward</a></p>`)
+  }
+
   const disclaimer = t(
     '本报告由 ShellWard 合规网关自动生成，帮助评估并满足合规技术要求，不构成法律意见，亦不替代算法备案/定级备案/PIA 等主体责任。⚪ 待确认项需结合业务人工判定。',
     'Generated by ShellWard Compliance Gateway. Assists with technical compliance; not legal advice. ⚪ items require manual review.')
@@ -364,6 +380,12 @@ table.tbl td.right{width:64px}
 .manual-note{margin:8px 36px 12px;font-size:13px;color:#475569;background:#eff6ff;
   border-left:3px solid #3b82f6;line-height:1.6}
 .manual-note code{background:#dbeafe;padding:1px 6px;border-radius:5px}
+.cfg{position:relative;margin:8px 36px}
+.cfg pre{background:#0f172a;color:#e2e8f0;border-radius:10px;padding:16px 18px;margin:0;
+  font-family:ui-monospace,Menlo,monospace;font-size:12.5px;overflow-x:auto;line-height:1.5}
+.cfg button{position:absolute;top:10px;right:12px;background:#1e293b;color:#94a3b8;border:0;
+  border-radius:6px;padding:5px 12px;font-size:12px;cursor:pointer}
+.cfg button:hover{color:#fff}
 
 /* 法规分组 */
 .reg{margin:14px 36px;padding:0;border:1px solid var(--line);border-radius:12px;overflow:hidden}

src/compliance/project-scan.ts

@@ -130,7 +130,7 @@ export function renderComplianceReport(report: ComplianceReport, locale: 'zh' |
 }
 
 const KIND_LABEL: Record<FindingKind, { zh: string; en: string; icon: string }> = {
-  overseas: { zh: '数据出境风险', en: 'Data export risk', icon: '🌐' },
+  overseas: { zh: '境外大模型调用（需评估出境）', en: 'Overseas LLM (assess export)', icon: '🌐' },
   secret: { zh: '硬编码密钥', en: 'Hardcoded secret', icon: '🔑' },
   pii: { zh: '个人信息暴露', en: 'PII exposure', icon: '🪪' },
   'env-perm': { zh: '.env 权限', en: '.env permission', icon: '📂' },

src/compliance/report.ts

@@ -78,7 +78,7 @@ const badFacts: EnvFacts = {
   const rootFail = bad.results.find(r => r.control.id === 'mlps-not-root')
   test('root 运行 → mlps-not-root = fail', rootFail?.status === 'fail')
   const exportFail = bad.results.find(r => r.control.id === 'cbdt-overseas-llm')
-  test('境外端点 → cbdt-overseas-llm = fail', exportFail?.status === 'fail')
+  test('境外端点 → cbdt-overseas-llm = warn（需评估，不武断判违规）', exportFail?.status === 'warn')
   const auditFail = bad.results.find(r => r.control.id === 'csl-audit-log')
   test('无审计日志 → csl-audit-log = fail', auditFail?.status === 'fail')
   test('坏环境得分 < 干净环境得分', bad.score < good.score, `${bad.score} vs ${good.score}`)