{"ok":true,"snapshot":{"schemaVersion":"kmep-cn-public-deployment-v1","generatedAt":"2026-10-19T11:10:47.960Z","host":"kmep.cn","runtimeKind":"main","status":"public_ready","score":100,"blockerCount":0,"warningCount":0,"readyCount":6,"domains":[{"host":"kmep.cn","kind":"main","title":"KMEP 主站","purpose":"官网、产品介绍、采购入口、合规说明。","dataBoundary":"只展示公开产品信息，不读取学校数据。","launchPolicy":"公网默认入口，面向学校和教师展示产品矩阵。"},{"host":"www.kmep.cn","kind":"main","title":"官网别名","purpose":"兼容用户习惯，跳转或同源展示主站。","dataBoundary":"与 kmep.cn 相同。","launchPolicy":"建议 301 跳转到 kmep.cn。"},{"host":"demo.kmep.cn","kind":"demo","title":"公网演示环境","purpose":"学校采购前演示、公开体验、录屏展示。","dataBoundary":"只使用演示机构、演示账号和可重置数据，不承载正式教学记录。","launchPolicy":"独立数据库或独立机构标识，页面显著提示演示性质。"},{"host":"app.kmep.cn","kind":"app","title":"正式 SaaS 入口","purpose":"学校采购后开通机构、正式登录、教学运行。","dataBoundary":"承载学校正式数据，必须启用正式权限、审计、备份和运维告警。","launchPolicy":"生产环境必须关闭演示认证开关，配置 HTTPS、备份、对象存储和日志。"},{"host":"api.kmep.cn","kind":"api","title":"API 服务","purpose":"移动端、外部虚仿、学校系统和自动化集成。","dataBoundary":"只暴露受鉴权保护的接口，外部写入必须有签名、机构校验和审计。","launchPolicy":"与 Web 前台分离限流，接入 WAF、日志和密钥轮换。"},{"host":"docs.kmep.cn","kind":"docs","title":"文档中心","purpose":"部署手册、操作手册、API 文档、学校采购说明。","dataBoundary":"只存放公开文档和脱敏案例。","launchPolicy":"适合静态站或文档服务，禁止放真实密钥。"},{"host":"download.kmep.cn","kind":"download","title":"下载中心","purpose":"客户端、安装包、模板、教材样例和导入模板下载。","dataBoundary":"公开文件和授权下载文件分区管理。","launchPolicy":"下载文件走对象存储和 CDN，保留版本号和校验值。"},{"host":"status.kmep.cn","kind":"status","title":"状态页","purpose":"展示服务可用性、维护公告、故障说明。","dataBoundary":"只展示服务状态，不展示机构数据。","launchPolicy":"可后置，但生产客户多校部署前应补齐。"},{"host":"ai.kmep.cn","kind":"ai","title":"AI 能力中心","purpose":"说明 AI 助教、教材解析、EduResearch、BYOK 和安全边界。","dataBoundary":"展示 AI 能力和安全规则，不直接暴露模型密钥。","launchPolicy":"可与主站同应用路由映射，也可后续拆分。"},{"host":"er.kmep.cn","kind":"er","title":"个人 EduResearch","purpose":"教师个人注册、BYOK、导入数据、生成教改研究材料包。","dataBoundary":"个人 ER 与学校正式 KMEP 机构隔离，不默认读取学校数据。","launchPolicy":"先做账号注册和 BYOK 安全说明，再逐步开放个人版。"}],"entryPoints":[{"key":"school_purchase","title":"学校采购版","primaryHost":"app.kmep.cn","primaryHref":"/login","audience":"高校、学院、专业负责人、课程团队","promise":"承载正式机构、真实教学运行、教材闭环、专业建设和质量评价。","accountPolicy":"由学校管理员开通或导入账号，支持教师、学生、管理员角色。","dataPolicy":"数据归属机构（学校），按合同、权限和审计策略使用。","actions":[{"label":"学校登录","href":"/login"},{"label":"申请采购演示","href":"/terms#purchase"}]},{"key":"public_demo","title":"公网体验版","primaryHost":"demo.kmep.cn","primaryHref":"/login","audience":"试用教师、学校评审、演示用户","promise":"联系开通体验账号后登录，体验主流程，不承载正式成绩和证书。","accountPolicy":"体验账号由管理员开通，演示机构可定期重置。","dataPolicy":"只写入演示数据，禁止上传学生真实敏感数据。","actions":[{"label":"联系开通","href":"/terms#purchase"},{"label":"公网诊断","href":"/api/public-site/deployment-readiness"}]},{"key":"personal_er","title":"个人 EduResearch","primaryHost":"er.kmep.cn","primaryHref":"/er","audience":"一线教师、教改研究者、课程负责人","promise":"老师自带数据和 API Key，生成可审计的研究问题、证据链和论文材料包。","accountPolicy":"个人注册后使用，BYOK 优先采用会话级输入，不默认长期保存密钥。","dataPolicy":"个人导入数据必须脱敏，研究结论由教师人工确认。","actions":[{"label":"进入 ER","href":"/er"},{"label":"AI 安全说明","href":"/ai-security"}]}],"aiByokSafety":[{"key":"human_in_loop","title":"AI 给建议，人做决定","detail":"AI 只能生成建议、摘要、解析、预警和材料草稿，发布、评分、结论和干预必须由教师或管理员确认。","owner":"shared"},{"key":"tenant_boundary","title":"学校数据边界","detail":"学校正式系统按 tenantId 隔离，AI 调用也必须携带机构、用户、功能和资源审计。","owner":"platform"},{"key":"byok","title":"BYOK 密钥边界","detail":"个人 ER 可让教师提供自己的模型 API Key；优先会话级使用，若保存必须加密、可删除、可轮换。","owner":"teacher"},{"key":"data_minimization","title":"最小必要数据","detail":"进入模型前尽量使用脱敏样本、统计摘要、变量说明和证据片段，避免直接发送完整学生个人信息。","owner":"platform"},{"key":"audit","title":"调用审计","detail":"记录模型、功能、用户、资源、耗时、错误和用量，不记录明文密钥。","owner":"platform"},{"key":"school_policy","title":"学校制度优先","detail":"正式采购版应服从学校数据治理、伦理审查、教学评价和信息化安全制度。","owner":"school"}],"compliance":{"icpNumber":"粤ICP备2021134170号-7","icpLink":"https://beian.miit.gov.cn/","mpsNumber":"公安联网备案公网开通后补齐","mpsLink":"https://beian.mps.gov.cn/","privacyPath":"/privacy","termsPath":"/terms","aiSecurityPath":"/ai-security","effectiveNote":"正式上线文本以法务确认版本和工信部备案信息为准。"},"checks":[{"key":"domain_matrix","title":"域名结构已定义","severity":"ready","detail":"已定义 10 个公网域名入口。","action":"上线前在 DNS 和 Nginx 中逐项映射。"},{"key":"demo_isolation","title":"演示环境隔离","severity":"ready","detail":"demo.kmep.cn 与 app.kmep.cn 分离。","action":"演示库和正式库必须拆开，演示账号可重置。"},{"key":"entry_separation","title":"学校版与个人 ER 入口分离","severity":"ready","detail":"app.kmep.cn / er.kmep.cn","action":"公网导航要让采购版、演示版、个人 ER 各走各的入口。"},{"key":"icp_footer","title":"ICP备案页脚","severity":"ready","detail":"当前页脚备案信息：粤ICP备2021134170号-7。","action":"公网正式发布前核对备案主体、备案号和跳转链接。"},{"key":"legal_pages","title":"隐私、条款、AI 安全说明","severity":"ready","detail":"/privacy / /terms / /ai-security","action":"商业上线前由法务确认最终文本。"},{"key":"ai_byok","title":"AI/BYOK 安全边界","severity":"ready","detail":"已定义 6 条 AI/BYOK 边界。","action":"上线后补充模型供应商、费用、密钥删除和审计说明。"}],"nextActions":["DNS 解析到服务器公网 IP。","Nginx 配置 HTTPS、HSTS 和反向代理。","demo 与 app 使用不同数据库或严格机构隔离。","生产环境关闭演示认证与短信模拟开关。","公网注册启用短信验证码与阿里云验证码 2.0 防刷。"]}}