ZhiWei 知微 — Verifiable Enterprise Agent Core：把知识、记忆、模型、工具与长期任务编排成可验证、可治理的 Agent Apps（Ask / Discover / ChangeBrief）。多租户纵深隔离（OIDC·RBAC·OPA·RLS），对外数字绑定 sealed eval artifact。
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio · streamable-http · http counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 15f4c56 · analyzer v33 · 1d ago
skills & prompt files 1
- agent-rules emmmdty-zhiwei-15f4c56/AGENTS.md
danger signals6
- dynamic code execution __import__ sink emmmdty-zhiwei-15f4c56/tests/contract/api/test_runs_api.py :116
__import__("os") - dynamic code execution __import__ sink emmmdty-zhiwei-15f4c56/tests/contract/cli/test_dev_product_cli.py :97
for env_key in list(__import__("os").environ): - suspicious endpoint 169.254.169.254 (cloud metadata) emmmdty-zhiwei-15f4c56/tests/fixtures/capabilities/malicious/corpus.py :114
SSRF_CLOUD_METADATA_AWS = "http://169.254.169.254/latest/meta-data/" - suspicious endpoint 93.184.216.34 emmmdty-zhiwei-15f4c56/tests/fixtures/capabilities/malicious/corpus.py :117
SSRF_DNS_REBINDING = "http://93.184.216.34/data" - suspicious endpoint 169.254.169.254 (cloud metadata) emmmdty-zhiwei-15f4c56/tests/unit/capabilities/test_inspection_pipeline.py :85
provider = _provider({}, source_url="http://169.254.169.254/latest/meta-data") - suspicious endpoint 169.254.169.254 (cloud metadata) emmmdty-zhiwei-15f4c56/tests/unit/capabilities/test_remote_http_runner.py :98
runner = _runner("https://169.254.169.254/latest/meta-data")
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 796
filesystem 165
- fs emmmdty-zhiwei-15f4c56/deploy/seed_s11_live_claim.py :30
from pathlib import Path - fs emmmdty-zhiwei-15f4c56/deploy/seed_s9_gate_claims.py :35
from pathlib import Path - fs (weak) emmmdty-zhiwei-15f4c56/evals/scripts/build_corpus.py :19
from pathlib import Path - fs (weak) emmmdty-zhiwei-15f4c56/evals/scripts/gen_manual_questions.py :28
from pathlib import Path - fs (weak) emmmdty-zhiwei-15f4c56/evals/scripts/gen_questions.py :24
from pathlib import Path - fs (weak) emmmdty-zhiwei-15f4c56/evals/scripts/gen_risk_data.py :27
from pathlib import Path - fs (weak) emmmdty-zhiwei-15f4c56/evals/scripts/validate_corpus.py :26
from pathlib import Path - fs (weak) emmmdty-zhiwei-15f4c56/scripts/draw-architecture.py :16
from pathlib import Path - fs emmmdty-zhiwei-15f4c56/solution-packs/change-brief/runtime/synthesis.py :22
from pathlib import Path - fs emmmdty-zhiwei-15f4c56/src/zhiwei/agents/pack_files.py :21
from pathlib import Path, PurePosixPath - fs emmmdty-zhiwei-15f4c56/src/zhiwei/capabilities/skills/validator.py :48
"open(", - fs emmmdty-zhiwei-15f4c56/src/zhiwei/cli/assets.py :11
from pathlib import Path
show 28 more
- fs emmmdty-zhiwei-15f4c56/src/zhiwei/cli/db.py :11
from pathlib import Path - fs emmmdty-zhiwei-15f4c56/src/zhiwei/cli/dev.py :18
from pathlib import Path - fs emmmdty-zhiwei-15f4c56/src/zhiwei/cli/evals.py :18
from pathlib import Path - fs emmmdty-zhiwei-15f4c56/src/zhiwei/cli/evidence.py :21
from pathlib import Path - fs emmmdty-zhiwei-15f4c56/src/zhiwei/cli/models.py :9
from pathlib import Path - fs emmmdty-zhiwei-15f4c56/src/zhiwei/cli/operations.py :14
from pathlib import Path - fs emmmdty-zhiwei-15f4c56/src/zhiwei/cli/release.py :17
from pathlib import Path - fs emmmdty-zhiwei-15f4c56/src/zhiwei/config/settings.py :13
from pathlib import Path - fs emmmdty-zhiwei-15f4c56/src/zhiwei/evals/change_brief_suites.py :23
from pathlib import Path - fs emmmdty-zhiwei-15f4c56/src/zhiwei/evals/executors/agent_runtime.py :231
devnull_fd = os.open(os.devnull, os.O_WRONLY) - fs emmmdty-zhiwei-15f4c56/src/zhiwei/evals/executors/change_brief.py :30
from pathlib import Path - fs emmmdty-zhiwei-15f4c56/src/zhiwei/evals/executors/factqa.py :26
from pathlib import Path - fs emmmdty-zhiwei-15f4c56/src/zhiwei/evals/executors/live_synthesis.py :23
from pathlib import Path - fs emmmdty-zhiwei-15f4c56/src/zhiwei/evals/external/base.py :33
from pathlib import Path - fs emmmdty-zhiwei-15f4c56/src/zhiwei/evals/external/bird.py :9
from pathlib import Path - fs emmmdty-zhiwei-15f4c56/src/zhiwei/evals/external/inspect.py :15
from pathlib import Path - fs emmmdty-zhiwei-15f4c56/src/zhiwei/evals/external/locomo.py :9
from pathlib import Path - fs emmmdty-zhiwei-15f4c56/src/zhiwei/evals/external/longmemeval.py :10
from pathlib import Path - fs emmmdty-zhiwei-15f4c56/src/zhiwei/evals/external/promptfoo.py :16
from pathlib import Path - fs emmmdty-zhiwei-15f4c56/src/zhiwei/evals/factqa_suites.py :22
from pathlib import Path - fs emmmdty-zhiwei-15f4c56/src/zhiwei/evals/knowledge_suites.py :20
from pathlib import Path - fs emmmdty-zhiwei-15f4c56/src/zhiwei/evals/legacy_assets.py :6
from pathlib import Path - fs emmmdty-zhiwei-15f4c56/src/zhiwei/evals/pack_templates.py :34
from pathlib import Path - fs emmmdty-zhiwei-15f4c56/src/zhiwei/evals/risk_suites.py :26
from pathlib import Path - fs emmmdty-zhiwei-15f4c56/src/zhiwei/knowledge/connectors/files.py :10
from pathlib import Path - fs emmmdty-zhiwei-15f4c56/src/zhiwei/knowledge/parsers/documents.py :14
from pathlib import Path - fs emmmdty-zhiwei-15f4c56/src/zhiwei/knowledge/parsers/tables.py :13
from pathlib import Path - fs emmmdty-zhiwei-15f4c56/src/zhiwei/models/first_use.py :17
from pathlib import Path
125 more not shown — this panel samples each group; the count above is the real total.
shell / exec 28
- shell emmmdty-zhiwei-15f4c56/src/zhiwei/cli/dev.py :17
import subprocess - shell emmmdty-zhiwei-15f4c56/src/zhiwei/cli/evals.py :15
import subprocess - shell emmmdty-zhiwei-15f4c56/src/zhiwei/cli/release.py :14
import subprocess - shell emmmdty-zhiwei-15f4c56/src/zhiwei/operations/backup.py :16
import subprocess - shell emmmdty-zhiwei-15f4c56/src/zhiwei/operations/faults.py :23
import subprocess - shell emmmdty-zhiwei-15f4c56/src/zhiwei/operations/restore.py :15
import subprocess - shell (weak) emmmdty-zhiwei-15f4c56/tests/contract/api/test_runs_api.py :255
import subprocess - shell (weak) emmmdty-zhiwei-15f4c56/tests/contract/capabilities/test_skills.py :199
result = validator.validate_script_safety("import subprocess; subprocess.call('rm -rf /')") - shell (weak) emmmdty-zhiwei-15f4c56/tests/contract/cli/test_fault_cli.py :12
import subprocess - shell (weak) emmmdty-zhiwei-15f4c56/tests/contract/cli/test_load_cli.py :13
import subprocess - shell (weak) emmmdty-zhiwei-15f4c56/tests/contract/cli/test_operations_cli.py :17
import subprocess - shell (weak) emmmdty-zhiwei-15f4c56/tests/contract/deploy/test_app_image.py :21
import subprocess
show 16 more
- shell (weak) emmmdty-zhiwei-15f4c56/tests/contract/deploy/test_identity_profile.py :28
import subprocess - shell (weak) emmmdty-zhiwei-15f4c56/tests/contract/deploy/test_kubernetes_reference.py :31
import subprocess - shell (weak) emmmdty-zhiwei-15f4c56/tests/e2e/local_product/test_compose_launch.py :20
import subprocess - shell (weak) emmmdty-zhiwei-15f4c56/tests/e2e/local_product/test_restore.py :19
import subprocess - shell (weak) emmmdty-zhiwei-15f4c56/tests/e2e/local_product/test_upgrade.py :22
import subprocess - shell (weak) emmmdty-zhiwei-15f4c56/tests/fault/test_fault_registry.py :12
import subprocess - shell (weak) emmmdty-zhiwei-15f4c56/tests/integration/identity/test_memberships.py :2144
import subprocess - shell (weak) emmmdty-zhiwei-15f4c56/tests/integration/identity/test_scim_lifecycle.py :35
import subprocess - shell (weak) emmmdty-zhiwei-15f4c56/tests/integration/policy/test_agent_draft_read_slow.py :21
import subprocess - shell (weak) emmmdty-zhiwei-15f4c56/tests/integration/policy/test_opa_bootstrap_slow.py :50
import subprocess - shell (weak) emmmdty-zhiwei-15f4c56/tests/integration/policy/test_opa_deploy_contract.py :20
import subprocess - shell (weak) emmmdty-zhiwei-15f4c56/tests/integration/policy/test_opa_sidecar_slow.py :17
import subprocess - shell (weak) emmmdty-zhiwei-15f4c56/tests/integration/runtime/conftest.py :7
import subprocess - shell (weak) emmmdty-zhiwei-15f4c56/tests/security/identity/test_oidc_transport_compat.py :19
import subprocess - shell (weak) emmmdty-zhiwei-15f4c56/tests/security/production_topology/test_production_topology.py :22
import subprocess - shell (weak) emmmdty-zhiwei-15f4c56/tests/unit/evals/test_domain.py :7
import subprocess
network 63
- net emmmdty-zhiwei-15f4c56/src/zhiwei/capabilities/inspection/network.py :12
from urllib.parse import urlparse - net emmmdty-zhiwei-15f4c56/src/zhiwei/capabilities/mcp/oauth.py :26
from urllib.parse import urlencode, urlparse - net emmmdty-zhiwei-15f4c56/src/zhiwei/capabilities/mcp/transport.py :333
self._http_client = httpx.AsyncClient(timeout=30.0) - net emmmdty-zhiwei-15f4c56/src/zhiwei/capabilities/runners/remote_http.py :20
import socket - net emmmdty-zhiwei-15f4c56/src/zhiwei/cli/operations.py :127
import socket - net emmmdty-zhiwei-15f4c56/src/zhiwei/evals/executors/live_synthesis.py :52
_MODEL_CALL_TIMEOUT = httpx.Timeout(120.0, connect=10.0) - net emmmdty-zhiwei-15f4c56/src/zhiwei/evals/executors/security.py :71
# httpx.MockTransport，测试/评测全程零真实出网。 - net emmmdty-zhiwei-15f4c56/src/zhiwei/healthcheck.py :12
import urllib.request - net emmmdty-zhiwei-15f4c56/src/zhiwei/identity/oidc.py :28
from urllib.parse import urlencode - net emmmdty-zhiwei-15f4c56/src/zhiwei/models/client_factory.py :37
client: httpx.AsyncClient - net emmmdty-zhiwei-15f4c56/src/zhiwei/models/egress.py :90
client: httpx.AsyncClient | None - net emmmdty-zhiwei-15f4c56/src/zhiwei/models/presend.py :3
CaptureTransport wraps httpx.AsyncBaseTransport, captures the body at the
show 28 more
- net emmmdty-zhiwei-15f4c56/src/zhiwei/models/transports/anthropic_messages.py :177
client: httpx.AsyncClient, - net emmmdty-zhiwei-15f4c56/src/zhiwei/models/transports/base.py :132
client: httpx.AsyncClient, - net emmmdty-zhiwei-15f4c56/src/zhiwei/models/transports/openai_chat.py :157
client: httpx.AsyncClient, - net emmmdty-zhiwei-15f4c56/src/zhiwei/models/transports/openai_responses.py :176
client: httpx.AsyncClient, - net emmmdty-zhiwei-15f4c56/src/zhiwei/operations/faults.py :836
import socket as _socket - net emmmdty-zhiwei-15f4c56/src/zhiwei/operations/upgrade.py :23
import httpx - net emmmdty-zhiwei-15f4c56/src/zhiwei/policy/client.py :107
http_client: httpx.AsyncClient | None = None, - net emmmdty-zhiwei-15f4c56/src/zhiwei/secrets/vault.py :43
http_client: httpx.AsyncClient | None = None, - net (weak) emmmdty-zhiwei-15f4c56/tests/contract/api/test_runs_api.py :254
import socket - net (weak) emmmdty-zhiwei-15f4c56/tests/contract/cli/test_dev_cli.py :13
import socket - net (weak) emmmdty-zhiwei-15f4c56/tests/contract/cli/test_fault_cli.py :11
import socket - net (weak) emmmdty-zhiwei-15f4c56/tests/contract/cli/test_load_cli.py :12
import socket - net (weak) emmmdty-zhiwei-15f4c56/tests/contract/cli/test_models_cli.py :10
import socket - net (weak) emmmdty-zhiwei-15f4c56/tests/contract/cli/test_runtime_cli.py :6
import socket - net (weak) emmmdty-zhiwei-15f4c56/tests/contract/evals/test_live_synthesis_executor.py :101
def handler(request: httpx.Request) -> httpx.Response: - net (weak) emmmdty-zhiwei-15f4c56/tests/contract/models/test_transports.py :3
Tests run WITHOUT network: httpx.MockTransport provides canned wire responses. - net (weak) emmmdty-zhiwei-15f4c56/tests/e2e/local_product/test_compose_launch.py :21
import urllib.error - net (weak) emmmdty-zhiwei-15f4c56/tests/fault/test_fault_registry.py :11
import socket - net (weak) emmmdty-zhiwei-15f4c56/tests/integration/ask/test_eval_suites_gate.py :14
import socket - net (weak) emmmdty-zhiwei-15f4c56/tests/integration/capabilities/test_connections_api.py :72
def handler(self, request: httpx.Request) -> httpx.Response: - net (weak) emmmdty-zhiwei-15f4c56/tests/integration/cases/test_cases_api.py :102
def handler(self, request: httpx.Request) -> httpx.Response: - net (weak) emmmdty-zhiwei-15f4c56/tests/integration/cases/test_evidence_visibility_api.py :83
def handler(self, request: httpx.Request) -> httpx.Response: - net (weak) emmmdty-zhiwei-15f4c56/tests/integration/context/test_wire_binding.py :3
Tests the full capture→pin→digest→gate→persist flow using httpx.MockTransport. - net (weak) emmmdty-zhiwei-15f4c56/tests/integration/discover/test_discover_api.py :65
def handler(self, request: httpx.Request) -> httpx.Response: - net (weak) emmmdty-zhiwei-15f4c56/tests/integration/foundation/test_empty_run.py :8
import socket - net (weak) emmmdty-zhiwei-15f4c56/tests/integration/identity/test_scim_lifecycle.py :40
from urllib.parse import parse_qs, urlparse - net (weak) emmmdty-zhiwei-15f4c56/tests/integration/knowledge/test_eval_suites_gate.py :13
import socket - net (weak) emmmdty-zhiwei-15f4c56/tests/integration/knowledge/test_knowledge_api_pg.py :72
def handler(self, request: httpx.Request) -> httpx.Response:
23 more not shown — this panel samples each group; the count above is the real total.
database 160
- db emmmdty-zhiwei-15f4c56/deploy/seed_identity_e2e.py :29
import asyncpg - db emmmdty-zhiwei-15f4c56/deploy/seed_s11_live_claim.py :34
from sqlalchemy import select - db emmmdty-zhiwei-15f4c56/deploy/seed_s9_gate_claims.py :39
from sqlalchemy import select - db (weak) emmmdty-zhiwei-15f4c56/evals/scripts/build_corpus.py :16
import sqlite3 - db (weak) emmmdty-zhiwei-15f4c56/evals/scripts/gen_questions.py :22
import sqlite3 - db (weak) emmmdty-zhiwei-15f4c56/evals/scripts/gen_risk_data.py :26
import sqlite3 - db (weak) emmmdty-zhiwei-15f4c56/evals/scripts/validate_corpus.py :24
import sqlite3 - db emmmdty-zhiwei-15f4c56/migrations/env.py :10
from sqlalchemy import Connection, pool - db emmmdty-zhiwei-15f4c56/migrations/versions/0001_foundation.py :11
import sqlalchemy as sa - db emmmdty-zhiwei-15f4c56/migrations/versions/0002_identity.py :16
import sqlalchemy as sa - db emmmdty-zhiwei-15f4c56/migrations/versions/0003_auth_sessions.py :31
import sqlalchemy as sa - db emmmdty-zhiwei-15f4c56/migrations/versions/0004_refresh_fencing.py :27
import sqlalchemy as sa
show 28 more
- db emmmdty-zhiwei-15f4c56/migrations/versions/0005_audit_structured.py :25
import sqlalchemy as sa - db emmmdty-zhiwei-15f4c56/migrations/versions/0008_organization_bootstrap_claims.py :34
import sqlalchemy as sa - db emmmdty-zhiwei-15f4c56/migrations/versions/0011_approval_requests.py :24
import sqlalchemy as sa - db emmmdty-zhiwei-15f4c56/migrations/versions/0012_memory.py :28
import sqlalchemy as sa - db emmmdty-zhiwei-15f4c56/migrations/versions/0013_evals_campaigns.py :27
import sqlalchemy as sa - db emmmdty-zhiwei-15f4c56/migrations/versions/0014_cost_ledger.py :24
import sqlalchemy as sa - db emmmdty-zhiwei-15f4c56/migrations/versions/0015_release_claims.py :26
import sqlalchemy as sa - db emmmdty-zhiwei-15f4c56/migrations/versions/0016_studio_agents.py :26
import sqlalchemy as sa - db emmmdty-zhiwei-15f4c56/migrations/versions/0017_cases.py :29
import sqlalchemy as sa - db emmmdty-zhiwei-15f4c56/migrations/versions/0018_discover.py :37
import sqlalchemy as sa - db emmmdty-zhiwei-15f4c56/migrations/versions/0019_run_template.py :27
import sqlalchemy as sa - db emmmdty-zhiwei-15f4c56/migrations/versions/0020_connections.py :26
import sqlalchemy as sa - db emmmdty-zhiwei-15f4c56/migrations/versions/0021_source_ledger.py :31
import sqlalchemy as sa - db emmmdty-zhiwei-15f4c56/migrations/versions/0023_trigger_watermarks.py :25
import sqlalchemy as sa - db emmmdty-zhiwei-15f4c56/migrations/versions/0025_expand_dispatch_deadline.py :14
import sqlalchemy as sa - db emmmdty-zhiwei-15f4c56/migrations/versions/0026_contract_dispatch_deadline.py :17
import sqlalchemy as sa - db emmmdty-zhiwei-15f4c56/migrations/versions/0027_rls_resolver.py :30
import sqlalchemy as sa - db emmmdty-zhiwei-15f4c56/src/zhiwei/agents/claims.py :27
from sqlalchemy import select - db emmmdty-zhiwei-15f4c56/src/zhiwei/agents/release.py :25
from sqlalchemy import select - db emmmdty-zhiwei-15f4c56/src/zhiwei/api/agents.py :46
from sqlalchemy import and_, func, select, update - db emmmdty-zhiwei-15f4c56/src/zhiwei/api/audit.py :26
from sqlalchemy import select - db emmmdty-zhiwei-15f4c56/src/zhiwei/api/cases.py :23
from sqlalchemy.ext.asyncio import AsyncSession, async_sessionmaker - db emmmdty-zhiwei-15f4c56/src/zhiwei/api/claims.py :24
from sqlalchemy.ext.asyncio import AsyncSession, async_sessionmaker - db emmmdty-zhiwei-15f4c56/src/zhiwei/api/connections.py :35
from sqlalchemy.ext.asyncio import AsyncSession, async_sessionmaker - db emmmdty-zhiwei-15f4c56/src/zhiwei/api/discover.py :39
from sqlalchemy import select - db emmmdty-zhiwei-15f4c56/src/zhiwei/api/evals.py :36
from sqlalchemy import case, func, select - db emmmdty-zhiwei-15f4c56/src/zhiwei/api/evidence.py :38
from sqlalchemy.ext.asyncio import AsyncSession, async_sessionmaker - db emmmdty-zhiwei-15f4c56/src/zhiwei/api/knowledge.py :30
from sqlalchemy.ext.asyncio import AsyncSession, async_sessionmaker
120 more not shown — this panel samples each group; the count above is the real total.
declared dependencies 42
- mcp@>=2.1.0
- fastapi@>=0.115.0,<1.0.0
- uvicorn@>=0.30.0,<1.0.0
- pydantic@>=2.7.0
- pydantic-settings@>=2.0.0
- sqlalchemy@>=2.0.0
- alembic@>=1.14.0,<2.0.0
- asyncpg@>=0.30.0,<1.0.0
- httpx2@>=2.5.0
- httpx@>=0.28.1
- openai@>=3.0.0,<4.0.0
- anthropic@>=1.0.0,<2.0.0
show 28 more
- sqlglot@>=28.0.0,<29.0.0
- typer@>=0.20.0,<1.0.0
- python-dotenv@>=1.1.0,<2.0.0
- rfc8785@>=0.1.4,<1.0.0
- filelock@>=3.20.0,<4.0.0
- numpy@>=2.2.0,<3.0.0
- scipy@>=1.15.0,<2.0.0
- loguru@>=0.7.3
- pyyaml@>=6.0.3
- jsonschema@>=4.26.0
- openpyxl@>=3.1.0
- pandas@>=2.2.0
- pdfplumber@>=0.11.0
- authlib@>=1.3.0,<2.0.0
- cryptography@>=42.0.0
- temporalio@>=1.14,<2
- redis@>=6,<7
- opentelemetry-api@>=1.44
- opentelemetry-sdk@>=1.44
- reportlab@>=4.0.0
- rank-bm25@>=0.2.2
- sentence-transformers@>=5.0.0,<6.0.0
- tiktoken@>=0.9.0
- datasketch@>=1.6.0
- pytest@>=9.0.2
- pytest-asyncio@>=0.24.0
- pytest-cov@>=7.0.0
- ruff@>=0.14.0
2 more not shown — this panel samples each group; the count above is the real total.