docs: 明确人工授权后的执行边界 (#32)

tests/test_harness_docs.py

@@ -148,6 +148,20 @@ class CoreDocumentTests(unittest.TestCase):
         self.assertIn("可直接实施", requirements)
         self.assertIn("真实个人/生产数据", setup)
 
+    def test_explicit_human_authorization_does_not_repeat_confirmation(self) -> None:
+        agents = (ROOT / "AGENTS.md").read_text(encoding="utf-8")
+        workflow = (ROOT / "docs/01-workflow.md").read_text(encoding="utf-8")
+        for text in (agents, workflow):
+            self.assertIn("明确授权后的执行", text)
+            self.assertIn("当前聊天", text)
+            self.assertIn("Gitea 工单", text)
+            self.assertIn("不能单独构成人工授权", text)
+            self.assertIn("不得仅因操作不可逆而重复询问或拒绝", text)
+            self.assertIn("平台自身强制的审批", text)
+
+        self.assertIn("可以在授权范围内处理真实个人数据或生产数据", agents)
+        self.assertIn("密码、令牌、Cookie 和私钥只从环境或安全配置读取", agents)
+
     def test_new_project_setup_requires_baseline_selection(self) -> None:
         required = CORE_DOCUMENT_REQUIREMENTS[
             "docs/07-new-project-documentation-setup.md"