个人 AI 的隐私困境：当你的助手知道一切时，如何保护自己？

用户 → 互联网 → 厂商服务器 → 模型 → 互联网 → 用户
              ↓
         数据存储（训练、日志、分析）

用户 → 本地进程 → 本地模型 → 用户
         ↓
    本地存储（可控）

用户 → 本地 Gateway → 云端 API → 本地 Gateway → 用户
         ↓                    ↓
    本地存储            仅处理当前请求
                         （可配置不存储）

# 发送整个代码库
context = read_directory("./my-project")
response = llm.chat(f"分析这个项目：{context}")

# 只发送相关文件
relevant_files = find_relevant_files("./src", "authentication")
context = summarize_files(relevant_files, max_tokens=5000)
response = llm.chat(f"分析认证模块：{context}")

{
  "permissions": {
    "daily-tasks": {
      "level": 2,
      "allowedPaths": ["~/calendar", "~/todos"],
      "requiresApproval": false
    },
    "coding": {
      "level": 3,
      "allowedPaths": ["~/projects"],
      "requiresApproval": false
    },
    "email-management": {
      "level": 4,
      "allowedPaths": ["~/.thunderbird"],
      "requiresApproval": true
    },
    "financial": {
      "level": 5,
      "allowedPaths": [],
      "requiresApproval": true,
      "approvalMethod": "manual"
    }
  }
}

import re

def sanitize_for_llm(text):
    # 隐藏邮箱
    text = re.sub(r'[\w\.-]+@[\w\.-]+', '[EMAIL]', text)
    # 隐藏 API 密钥
    text = re.sub(r'sk-[a-zA-Z0-9]{32,}', '[API_KEY]', text)
    # 隐藏密码
    text = re.sub(r'password["\']?\s*[:=]\s*["\']?[\w\!@#$%]+', 'password=[REDACTED]', text)
    # 隐藏身份证号
    text = re.sub(r'\d{17}[\dXx]', '[ID_NUMBER]', text)
    return text

{
  "timestamp": "2026-02-26T10:30:00Z",
  "action": "email.read",
  "agent": "main",
  "target": "inbox",
  "result": "success",
  "dataAccessed": {
    "count": 5,
    "types": ["subject", "sender", "body_preview"]
  },
  "userApproved": true,
  "approvalTime": "2026-02-26T10:29:55Z"
}

{
  "security": {
    "encryption": {
      "enabled": true,
      "algorithm": "AES-256-GCM",
      "keyStorage": "system-keychain"
    },
    "credentials": {
      "storage": "encrypted",
      "path": "~/.openclaw/credentials"
    }
  }
}

{
  "models": {
    "privacyMode": "strict",
    "providers": {
      "openai": {
        "optOutTraining": true,
        "dataRetention": "30d",
        "logRequests": false
      },
      "anthropic": {
        "optOutTraining": true,
        "dataRetention": "0d"
      }
    }
  }
}

{
  "memory": {
    "retention": {
      "transcripts": "90d",
      "embeddings": "365d",
      "auditLogs": "730d",
      "credentials": "permanent"
    },
    "autoPrune": {
      "enabled": true,
      "schedule": "0 3 * * 0"
    }
  }
}

{
  "network": {
    "gateway": {
      "bind": "loopback",
      "trustedProxies": ["127.0.0.1"]
    },
    "outbound": {
      "allowlist": [
        "api.openai.com",
        "api.anthropic.com",
        "api.siliconflow.cn"
      ],
      "blockPrivateRanges": true
    }
  }
}

{
  "security": {
    "sensitiveActions": {
      "requireApproval": [
        "file.delete",
        "email.send",
        "payment.initiate",
        "credential.access"
      ],
      "approvalMethod": "two-factor",
      "timeout": "300s"
    }
  }
}

{
  "permissions": {
    "default": "full-access"
  }
}

{
  "permissions": {
    "default": "read-only",
    "explicit": {
      "coding": ["projects/*"],
      "docs": ["documents/*"]
    }
  }
}

[INFO] 发送邮件至 ceo@company.com，内容：Q3 财报预览...
[DEBUG] API 密钥：sk-xxxxxxxxxxxxxx

[INFO] 发送邮件至 [REDACTED]，内容类型：财务报告
[DEBUG] API 密钥：[CONFIGURED]

# 搜索日志中的敏感信息
grep -r "sk-[a-zA-Z0-9]" /var/log/openclaw/
grep -r "password=" /var/log/openclaw/

def should_remember(content):
    # 检查是否包含敏感信息
    if contains_pii(content):
        return False
    if contains_secrets(content):
        return False
    if contains_financial_data(content):
        return False
    return True

# 检查是否包含公司名 + 财务关键词
if any(company in content for company in KNOWN_COMPANIES):
    if any(keyword in content for keyword in ["财报", "营收", "利润"]):
        return False

- [ ] 第三方是否存储数据？
- [ ] 数据存储在哪个国家？
- [ ] 是否有数据删除选项？
- [ ] 隐私政策是否更新？
- [ ] 是否有安全认证（SOC2、ISO27001）？

# 1. 安装 OpenClaw
curl -sSL https://openclaw.ai/install.sh | bash

# 2. 配置隐私模式
openclaw config set privacy.mode strict

# 3. 启用加密
openclaw security enable-encryption

# 4. 设置权限分级
openclaw permissions set default read-only