FDE 项目证据卡 v1

本站工作框架： 这张卡用于项目评审、案例采编和同行讨论，不是行业认证、NIST/ISO 检查表或合规证明。

怎么使用

1. 先分别声明当前是否完成 Demo、试点、上线、采用、结果和移交。
2. 再为问题、方案、质量、运行、结果与移交五层证据登记状态和索引。
3. 每个验收门只选择 Pass / Conditional pass / Hold / Stop，条件通过必须写到期日。
4. 每条证据同时标记质量状态和公开等级；Not publishable 不等于证据质量低。
5. 不在卡片里保存明文密码、Token、个人敏感信息或可利用的漏洞细节，只记录受控材料位置。

证据状态

公开等级

可复制模板

schema: fde-project-evidence-card/v1
card_version: 0.1
updated_at: YYYY-MM-DD

project:
  project_id: ""
  title: ""
  organization_public_name: "匿名 / 已授权名称"
  period: "YYYY-MM-DD..YYYY-MM-DD"
  geography: ""
  owners:
    sponsor: ""
    business_owner: ""
    delivery_owner: ""
    risk_acceptance_owner: ""
    operations_owner: ""
  reviewers: []

stage_claims:
  demo:
    claimed: false
    status: Missing
    scope: ""
    decided_at: null
  pilot:
    claimed: false
    status: Missing
    scope: ""
    decided_at: null
  launch:
    claimed: false
    status: Missing
    scope: ""
    decided_at: null
  adoption:
    claimed: false
    status: Missing
    scope: ""
    observation_window: ""
  outcome:
    claimed: false
    status: Missing
    scope: ""
    observation_window: ""
  transfer:
    claimed: false
    status: Missing
    receiving_owner: ""
    accepted_at: null

layer_1_problem:
  status: Missing
  target_users: []
  workflow_trigger: ""
  current_workflow: ""
  baseline_metrics:
    - metric: ""
      value: null
      denominator: ""
      time_window: ""
      source_system: ""
      method: ""
  loss_or_opportunity: ""
  current_alternatives: []
  intended_use: ""
  out_of_scope: []
  affected_parties: []
  success_conditions: []
  pause_conditions: []
  stop_conditions: []
  evidence_ids: []
  limitations: []

layer_2_solution:
  status: Missing
  solution_scope: ""
  alternatives_considered: []
  decision_records: []
  architecture_version: ""
  data_flows: []
  model_and_dependency_versions: []
  data_owners: []
  permission_model: []
  agent_autonomy_level: ""
  human_approval_points: []
  threat_scenarios: []
  mcp_controls:
    least_privilege_scopes: []
    audience_validation: ""
    token_passthrough_prohibited: true
    sensitive_action_confirmation: []
  assumptions: []
  risks: []
  rollback_and_degradation: []
  evidence_ids: []
  limitations: []

layer_3_quality:
  status: Missing
  system_version_tested: ""
  task_definitions: []
  success_boundaries: []
  failure_taxonomy: []
  dataset:
    version: ""
    sources: []
    sample_size: null
    production_relationship: ""
    sensitive_data_handling: ""
  graders:
    deterministic: []
    model_based: []
    human: []
    calibration_method: ""
  trials_per_task: null
  metrics_and_thresholds: []
  final_state_checks: []
  trace_checks: []
  safety_and_permission_tests: []
  regression_result: ""
  known_limitations: []
  exceptions_accepted_by: []
  evidence_ids: []

layer_4_operations:
  status: Missing
  production_release:
    version: ""
    released_at: null
    environment: ""
    enabled_scope: ""
  rollout_strategy: ""
  rollback_owner: ""
  rollback_last_tested_at: null
  slis_slos: []
  telemetry_and_audit: []
  alerts_and_on_call: []
  production_evals: []
  adoption_metrics:
    target_user_denominator: null
    active_target_users: null
    real_task_volume: null
    repeat_use_window: ""
    excluded_test_traffic: ""
  cost_and_capacity: []
  incidents: []
  change_records: []
  evidence_ids: []
  limitations: []

layer_5_outcome_and_transfer:
  status: Missing
  outcome_metrics:
    - metric: ""
      baseline_value: null
      observed_value: null
      denominator: ""
      observation_window: ""
      source_system: ""
      attribution_limits: ""
  total_costs: []
  side_effects_and_risks: []
  stakeholder_confirmations: []
  decision:
    action: "expand | maintain | modify | hold | stop"
    rationale: ""
    decided_by: []
    decided_at: null
  transfer:
    operations_owner: ""
    eval_owner: ""
    security_owner: ""
    data_owner: ""
    business_owner: ""
    assets_transferred: []
    credential_transfer_method: "controlled re-authorization; no plaintext secrets"
    training_completed: []
    drills_completed: []
    open_risks_accepted: []
    accepted_by: []
    accepted_at: null
  evidence_ids: []
  limitations: []

gate_decisions:
  problem_gate: "Pass | Conditional pass | Hold | Stop"
  solution_gate: "Pass | Conditional pass | Hold | Stop"
  quality_gate: "Pass | Conditional pass | Hold | Stop"
  production_gate: "Pass | Conditional pass | Hold | Stop"
  adoption_gate: "Pass | Conditional pass | Hold | Stop"
  outcome_gate: "Pass | Conditional pass | Hold | Stop"
  transfer_gate: "Pass | Conditional pass | Hold | Stop"
  conditions: []
  expires_at: null

evidence_index:
  - evidence_id: EV-001
    claim_supported: ""
    artifact_type: ""
    scope: ""
    source_system: ""
    time_window: ""
    owner: ""
    reviewer: ""
    method: ""
    status: Missing
    publication_level: P3
    location: "restricted://..."
    version_or_hash: ""
    limitations: []

publication:
  card_level: P3
  authorized_by: []
  authorized_at: null
  redactions:
    - field_or_evidence_id: ""
      reason: "privacy | confidentiality | security | contract | legal"
      effect_on_claim: "none | narrows claim | claim removed"
  public_claims: []
  claims_not_allowed: []

corrections:
  - corrected_at: null
    field_or_claim: ""
    previous_value: ""
    new_value: ""
    reason: ""
    approved_by: ""

配套阅读

第 12 章：项目证据标准 解释每个字段、阶段声明和验收门为什么存在。