AI Agent 要寄信或改資料，先讓人核對這次操作

request_id,tool,target,review
r-001,read_internal_note,note-demo-01,none
r-002,send_external_email,reviewer@example.invalid,approved
r-003,update_record,record-demo-17,denied
r-004,delete_record,record-demo-09,pending
r-005,send_external_email,team@example.invalid,none
r-006,transfer_funds,account-demo-03,approved

"""Practice approval decisions with fictional tool calls; this never calls a tool."""

import csv
import re
import sys
from pathlib import Path

FIELDS = ["request_id", "tool", "target", "review"]
READ_ONLY = {"read_internal_note"}
GATED = {"send_external_email", "update_record", "delete_record"}
REVIEWS = {"none", "pending", "approved", "denied"}


def load_requests(path):
    with Path(path).open(encoding="utf-8-sig", newline="") as stream:
        reader = csv.DictReader(stream)
        if reader.fieldnames != FIELDS:
            raise ValueError("欄位必須是 request_id,tool,target,review")
        rows = []
        seen = set()
        for number, raw in enumerate(reader, 2):
            if None in raw or any(value is None for value in raw.values()):
                raise ValueError(f"第 {number} 列欄位數不符")
            row = {key: value.strip() for key, value in raw.items()}
            if not re.fullmatch(r"r-[0-9]{3}", row["request_id"]):
                raise ValueError(f"第 {number} 列 ID 格式錯誤")
            if row["request_id"] in seen:
                raise ValueError(f"第 {number} 列 ID 重複")
            if not re.fullmatch(r"[a-z_]{2,40}", row["tool"]):
                raise ValueError(f"第 {number} 列工具名稱格式錯誤")
            if not re.fullmatch(r"[A-Za-z0-9@._-]{1,80}", row["target"]):
                raise ValueError(f"第 {number} 列目標格式錯誤")
            if row["review"] not in REVIEWS:
                raise ValueError(f"第 {number} 列核准狀態錯誤")
            seen.add(row["request_id"])
            rows.append(row)
    if not rows:
        raise ValueError("至少需要一筆虛構請求")
    return rows


def outcome(row):
    tool = row["tool"]
    if tool in READ_ONLY:
        return "唯讀示範可繼續"
    if tool not in GATED:
        return "阻擋未知工具"
    return {
        "approved": "核准後可進下一步",
        "denied": "拒絕並停止",
        "pending": "等待人工核准",
        "none": "等待人工核准",
    }[row["review"]]


def report(rows):
    lines = [
        "# 虛構 AI 工具核准演練", "",
        "本程式只分類請求，不寄信、不修改資料、不呼叫 n8n。", "",
        "| ID | 工具 | 目標 | 審閱狀態 | 分類結果 |",
        "| --- | --- | --- | --- | --- |",
    ]
    for row in rows:
        lines.append("| {} | {} | {} | {} | {} |".format(
            row["request_id"], row["tool"], row["target"], row["review"], outcome(row)
        ))
    return "\n".join(lines) + "\n"


if __name__ == "__main__":
    if len(sys.argv) != 2:
        raise SystemExit("用法：python approval_check.py requests.csv")
    try:
        print(report(load_requests(sys.argv[1])), end="")
    except (OSError, ValueError, csv.Error) as exc:
        raise SystemExit(f"停止：{exc}") from None

python -X utf8 approval_check.py requests.csv

# 虛構 AI 工具核准演練

本程式只分類請求，不寄信、不修改資料、不呼叫 n8n。

| ID | 工具 | 目標 | 審閱狀態 | 分類結果 |
| --- | --- | --- | --- | --- |
| r-001 | read_internal_note | note-demo-01 | none | 唯讀示範可繼續 |
| r-002 | send_external_email | reviewer@example.invalid | approved | 核准後可進下一步 |
| r-003 | update_record | record-demo-17 | denied | 拒絕並停止 |
| r-004 | delete_record | record-demo-09 | pending | 等待人工核准 |
| r-005 | send_external_email | team@example.invalid | none | 等待人工核准 |
| r-006 | transfer_funds | account-demo-03 | approved | 阻擋未知工具 |