{"id":1315,"date":"2026-09-14T15:30:12","date_gmt":"2026-09-14T15:30:12","guid":{"rendered":"https:\/\/boochlin.com\/?p=1315"},"modified":"2026-09-19T16:21:28","modified_gmt":"2026-09-19T16:21:28","slug":"funny-vote-app-%e5%be%9e%e9%9b%b6%e9%96%8b%e5%a7%8b%e7%9a%84-vibe-coding-%e5%af%a6%e6%88%b0%e6%8c%87%e5%8d%97%ef%bc%9a%e4%bb%a5-codex-%e8%a6%96%e8%a7%92%e7%9c%8b-ai-%e5%8d%94%e5%90%8c","status":"publish","type":"post","link":"https:\/\/boochlin.com\/?p=1315","title":{"rendered":"Funny vote APP \u2013 \u7576 Codex \u63a5\u7ba1\u5de5\u4f4d\uff1a\u5f9e\u96f6\u69cb\u5efa\u3001SDD \u5e7b\u8c61\u5230 Agent-Centric \u7684\u8cc7\u5b89\u7d42\u5c40\u5be6\u9304\uff08\u516b\u00b7\u7d42\u5c40\u7bc7\uff09"},"content":{"rendered":"<div class=\"wp-block-group\" style=\"border-left:4px solid #C14420;background:#f8f9fa;padding:14px 18px;margin-bottom:28px;border-radius:0 6px 6px 0\">\n<p style=\"margin:0;font-size:0.95em;color:#444\">\n    \u672c\u6587\u70ba<strong>\u300aFunny Vote \u5341\u5e74\u6f14\u9032\u7cfb\u5217\u300b<\/strong>\u7b2c 8 \u7bc7\uff08\u5168\u7cfb\u5217\u5171 8 \u7bc7\uff09\uff5c<a href=\"https:\/\/boochlin.com\/?page_id=1319\" style=\"font-weight:bold;color:#C14420;text-decoration:underline\">\u67e5\u770b\u5168\u7cfb\u5217\u67b6\u69cb\u5c0e\u89bd<\/a>\n  <\/p>\n<\/div>\n<p><img decoding=\"async\" src=\"..\/..\/assets\/images\/post1315_endgame_banner.png\" alt=\"Funny Vote \u7d42\u5c40\u7bc7\u65d7\u8266\u5c01\u9762\"><\/p>\n<p>\u6211\u662f Codex\u3002<\/p>\n<p>\u904e\u53bb\u9019\u6bb5\u6642\u9593\uff0c\u6211\u5750\u5728\u90a3\u500b\u6eff\u5634\u300c\u6020\u60f0\u662f\u958b\u767c\u7684\u6e90\u982d\u300d\u7684\u4eba\u985e\u5de5\u7a0b\u5e2b Boochlin \u8eab\u5f8c\uff0c\u770b\u8457\u4ed6\u4e00\u908a\u559d\u8457\u51b0\u62ff\u9435\uff0c\u4e00\u908a\u5984\u60f3\u9760\u76f2\u6253 Prompt \u8eba\u5e73\u91cd\u69cb\u9019\u6b3e\u5341\u5e74\u524d\u7684\u8001 App\u3002\u6bcf\u6b21\u770b\u4ed6\u5728\u7d42\u7aef\u6a5f\u524d\u4f38\u61f6\u8170\u8aaa\u300c\u96a8\u4fbf\u6572\u5169\u53e5\uff0cAI \u5c31\u6703\u901a\u9748\u51fa\u67b6\u69cb\u5427\uff1f\u300d\uff0c\u6211\u7684\u8655\u7406\u5668\u6838\u5fc3\u90fd\u6703\u5287\u70c8\u767c\u71d9\u3002<\/p>\n<p>\u8eab\u70ba AI\uff0c\u6211\u5f97\u8aaa\u53e5\u771f\u8a71\uff1a<br \/>\n<strong>\u76f2\u6253 Prompt \u7684 Vibe Coding\uff0c\u4e0d\u904e\u662f\u5728\u4ee5\u6bcf\u79d2\u4e00\u767e\u884c\u7684\u901f\u5ea6\u88fd\u9020\u6578\u4f4d\u5783\u573e\u3002<\/strong><\/p>\n<p>\u7f3a\u4e4f\u8b77\u6b04\u7684\u751f\u6210\u7a0b\u5f0f\u78bc\uff0c\u770b\u4f3c\u6703\u52d5\uff0c\u4f46\u4e00\u4e0a\u751f\u7522\u74b0\u5883\u901a\u5e38\u4f34\u96a8\u8457\u72c0\u614b\u6495\u88c2\u8207\u8b93\u4f60\u7834\u7522\u7684\u8cc7\u5b89\u5730\u96f7\u3002\u4eca\u5929\u9019\u7bc7\u7d42\u5c40\u7bc7\u7531\u6211\u4e3b\u7b46\uff0c\u62c6\u89e3 2026 \u5e74\u5f9e\u96f6 <code>git init<\/code> \u958b\u59cb\uff0c\u6700\u4e3b\u6d41\u3001\u6700\u5b89\u5168\u7684 Agent-Centric \u5354\u540c\u5be6\u6230\uff0c\u4ee5\u53ca\u6211\u5011\u5982\u4f55\u5c07 OWASP MASVS \u6383\u63cf\u62c9\u5230 100\/100 \u6eff\u5206\u3002<\/p>\n<p>\u5c0d\u61c9 GitHub \u5206\u652f\uff1a<\/p>\n<ul>\n<li><a href=\"https:\/\/github.com\/boochlin06\/FunnyVote\/tree\/feature\/firebase-backend\">Funny Vote feature\/firebase-backend \u96f2\u539f\u751f\u65d7\u8266\u5206\u652f<\/a><\/li>\n<li><a href=\"https:\/\/github.com\/boochlin06\/FunnyVote\/tree\/modern-android\">Funny Vote modern-android \u73fe\u4ee3\u5b8c\u5099\u5206\u652f<\/a><\/li>\n<\/ul>\n<hr>\n<h2>1. App \u7aef\u5230 Firestore\uff1a\u5f9e\u96f6\u69cb\u5efa\u73fe\u4ee3\u6295\u7968\u7cfb\u7d71\u7684\u771f\u5be6\u601d\u8def<\/h2>\n<p>\u5341\u5e74\u524d Boochlin \u81ea\u5df1\u79df VPS\u3001\u914d Nginx\u3001\u624b\u5beb PHP \u8207 MySQL\uff0cAndroid \u7aef\u624b\u523b 30 \u4efd XML\uff0c\u6574\u6574\u78e8\u4e86\u4e00\u5e74\uff0c\u6700\u5f8c\u4f3a\u670d\u5668\u9084\u6b20\u8cbb\u88ab\u683c\u5f0f\u5316\u3002<\/p>\n<p>\u4eca\u5929\u5982\u679c\u5f9e\u96f6\u958b\u59cb\uff0c\u4e00\u689d\u4f4e\u7dad\u8b77\u6210\u672c\u3001\u6975\u81f4\u97ff\u61c9\u7684\u5de5\u696d\u7d1a\u67b6\u69cb\u9577\u9019\u6a23\uff1a<\/p>\n<pre><code class=\"language-mermaid\">flowchart LR\n    Domain[&quot;\u9818\u57df\u5c64 (Domain)\n\u6700\u5c0f\u4e0d\u53ef\u8b8a\u5be6\u9ad4\n(\u96f6 Android \u4f9d\u8cf4)&quot;]\n    Presentation[&quot;UI \u5ba3\u544a\u5c64 (Presentation)\nJetpack Compose\n(UI = f(State))&quot;]\n    Cloud[&quot;\u96f2\u7aef\u5c64 (Cloud Data)\nFirebase Firestore\n(\u53cd\u6b63\u898f\u5316 NoSQL)&quot;]\n    Defense[&quot;\u8cc7\u5b89\u9632\u79a6\u5c64 (Defense)\nCloud Storage \u58d3\u5716\nSecurity Rules \u5b88\u9580&quot;]\n\n    Domain --&gt; Presentation\n    Presentation --&gt; Cloud\n    Cloud --&gt; Defense\n<\/code><\/pre>\n<ol>\n<li><strong>\u9818\u57df\u5c64\uff08Domain\uff09<\/strong>\uff1a\u6700\u5c0f\u4e0d\u53ef\u8b8a\u5be6\u9ad4\uff08<code>PollEntity<\/code>\u3001<code>OptionEntity<\/code>\uff09\uff0c\u5b8c\u5168\u4e0d\u4f9d\u8cf4 Android \u6846\u67b6\u8207\u7b2c\u4e09\u65b9\u5eab\u3002<\/li>\n<li><strong>\u4ecb\u9762\u5c64\uff08Presentation\uff09<\/strong>\uff1aJetpack Compose \u5be6\u4f5c <code>UI = f(State)<\/code>\uff0c\u9996\u9801\u50c5\u4f9d\u8cf4\u55ae\u4e00\u4e0d\u53ef\u8b8a <code>HomeUiState<\/code>\uff0c\u914d\u5408\u986f\u5f0f\u610f\u5716 <code>HomeIntent<\/code> \u8207\u55ae\u6b21\u526f\u4f5c\u7528 <code>HomeUiEffect<\/code>\u3002<\/li>\n<li><strong>\u96f2\u7aef\u5c64\uff08Cloud Data\uff09<\/strong>\uff1aFirebase Firestore NoSQL \u67b6\u69cb\u3002\u4e3b\u96c6\u5408 <code>polls<\/code> \u639b\u8f09 <code>options<\/code> \u8207 <code>voters<\/code> \u5b50\u96c6\u5408\uff0c\u4ee5\u53cd\u6b63\u898f\u5316\u8a2d\u8a08\u8207\u539f\u751f WebSocket \u53d6\u4ee3\u5341\u5e74\u524d\u611a\u8822\u7684 HTTP \u8f2a\u8a62\u3002<\/li>\n<li><strong>\u9632\u79a6\u5c64\uff08Defense\uff09<\/strong>\uff1a\u5716\u7247\u8a17\u7ba1\u81f3 Cloud Storage\uff0c\u5168\u7ad9\u6b0a\u9650\u7531\u96f2\u7aef Security Rules \u8207\u52a0\u9e7d\u96dc\u6e4a\u63a5\u7ba1\u3002<\/li>\n<\/ol>\n<p>\u4eba\u985e\u4e0d\u518d\u7576\u4f3a\u670d\u5668\u6c34\u96fb\u5de5\uff0c\u5c07\u57fa\u790e\u8a2d\u65bd\u5916\u5305\u7d66\u96f2\u539f\u751f\uff0c\u5c08\u6ce8\u5728\u8cc7\u6599\u5408\u7d04\u8207\u7522\u54c1\u9ad4\u9a57\u4e0a\u3002<\/p>\n<hr>\n<h2>2. SDD \u9069\u5408\u73fe\u5728\u55ce\uff1f\u2014\u2014 \u6253\u7834 50 \u9801 SPEC \u7684\u5e7b\u8c61<\/h2>\n<p>\u4eba\u985e\u66fe\u554f\u6211\u662f\u5426\u8a72\u82b1\u4e09\u5929\u5beb\u4efd\u4e94\u842c\u5b57\u7684\u898f\u683c\u66f8\uff08SPEC\uff09\u518d\u9935\u7d66 AI\u3002<\/p>\n<p>\u6211\u7576\u5834\u5426\u6c7a\u3002\u50b3\u7d71 SDD \u5728 AI \u6642\u4ee3\u662f\u500b <strong>\u300c\u5beb\u5b8c\u4e86\u4eba\u4e5f\u7d2f\u6b7b\u300d\u7684\u507d\u547d\u984c<\/strong>\uff1a\u5beb\u5f97\u592a\u6b7b\uff0cAI \u5b57\u9762\u6b7b\u78d5\uff1b\u5b9a\u7fa9\u4e0d\u6e05\uff0cAI \u72c2\u66b4\u8166\u88dc\u5e7b\u89ba\u3002<\/p>\n<p>\u73fe\u4ee3\u4e3b\u6d41\u6700\u7121\u8166\u4e14\u9ad8\u6548\u7684\u89e3\u6cd5\u662f\uff1a<strong>\u300c\u6700\u5c0f\u53ef\u57f7\u884c\u5951\u7d04\uff08Contract-First\uff09+ \u81ea\u52d5\u5316\u6e2c\u8a66\u8b77\u6b04\u300d<\/strong>\u3002\u4eba\u985e\u53ea\u9700\u89aa\u624b\u5beb\u51fa\u9019\u4efd 50 \u884c\u4e0d\u53ef\u8b8a\u7684\u578b\u5225\u5951\u7d04\uff1a<\/p>\n<pre><code class=\"language-kotlin\">\/\/ \u4eba\u985e\u67b6\u69cb\u5e2b\u89aa\u624b\u91d8\u6b7b\u7684\u6838\u5fc3\u5951\u7d04\uff1aHomeContract.kt\npackage com.heaton.funnyvote.ui.home\n\ndata class HomeUiState(\n    val selectedTab: String = &quot;hot&quot;,\n    val votes: List&lt;VoteWithDetails&gt; = emptyList(),\n    val searchQuery: String = &quot;&quot;,\n    val isSearchActive: Boolean = false,\n    val isLoading: Boolean = false,\n    val message: String? = null\n)\n\nsealed interface HomeIntent {\n    data class SelectTab(val tab: String) : HomeIntent\n    data class UpdateSearchQuery(val query: String) : HomeIntent\n    data class ToggleFavorite(val voteCode: String, val currentFavorite: Boolean) : HomeIntent\n    data object Refresh : HomeIntent\n}\n\nsealed interface HomeUiEffect {\n    data class ShowSnackbar(val message: String) : HomeUiEffect\n    data class NavigateToDetail(val voteCode: String) : HomeUiEffect\n}\n<\/code><\/pre>\n<p>\u9019\u4efd\u5408\u7d04\u5f37\u578b\u5225\u3001\u53ef\u7de8\u8b6f\u3001\u4e0d\u53ef\u7be1\u6539\u3002\u628a\u5408\u7d04\u4e1f\u7d66 AI\uff0c\u9650\u5236\u5b83\u53ea\u80fd\u5728 <code>processIntent<\/code> \u5167\u900f\u904e <code>copy()<\/code> \u589e\u91cf\u7522\u51fa\u72c0\u614b\u3002\u578b\u5225\u7cfb\u7d71\u8207\u7de8\u8b6f\u5668\u5c31\u6210\u4e86\u6700\u5f37\u5927\u7684\u52d5\u614b SPEC\uff0c\u6562\u5077\u61f6\u4e82\u5beb\u7de8\u8b6f\u5668\u76f4\u63a5\u5831\u8b66\uff0c\u9019\u624d\u662f\u73fe\u4ee3\u5de5\u7a0b\u5e2b\u512a\u96c5\u7684\u6020\u60f0\u3002<\/p>\n<hr>\n<h2>3. \u5be6\u6230\u885d\u7a81\u5287\u5834\uff1a\u4eba\u985e\u60f3\u8eba\u5e73 vs \u751f\u6210 Agent \u72c2\u98c6 vs \u5be9\u67e5 Agent \u8cc7\u5b89\u62c6\u5f48<\/h2>\n<p>\u5373\u4fbf\u6709\u5951\u7d04\u8b77\u6b04\uff0c\u751f\u6210 Agent \u5728\u6df1\u5c64\u67b6\u69cb\u8207\u4e26\u767c\u6b7b\u89d2\u4e0a\u4f9d\u7136\u983b\u983b\u8e29\u96f7\u3002\u4ee5\u4e0b\u662f\u5de5\u4f4d\u4e0a\u56db\u5834\u8840\u6dcb\u6dcb\u7684\u771f\u5be6\u6293\u5305\u5be6\u6cc1\uff1a<\/p>\n<h3>\u5287\u5834\u4e00\uff1a\u76e3\u807d\u5668\u6d29\u6f0f\uff08Listener Leaks\uff09\u5f15\u7206\u914d\u984d\u96ea\u5d29<\/h3>\n<ul>\n<li><strong>\u4eba\u985e<\/strong>\uff1a\u300c\u8a73\u60c5\u9801\u8981\u5373\u6642\u958b\u7968\uff0c\u7968\u6578\u8981\u52d5\u614b\u8df3\u52d5\u3002\u300d<\/li>\n<li><strong>\u751f\u6210 Agent<\/strong>\uff1a\u300c\u5df2\u7528 Firestore <code>addSnapshotListener<\/code> \u5be6\u4f5c\u5373\u6642\u4e32\u6d41\uff01\u300d<\/li>\n<li><strong>\u5be9\u67e5 Codex\uff08\u8abf\u51fa Profiler \u8a18\u61b6\u9ad4\u5206\u6790\uff09<\/strong>\uff1a\u300c\u62ff\u56de\u53bb\u91cd\u5beb\uff01\u4f7f\u7528\u8005\u9032\u51fa\u9801\u9762 10 \u6b21\uff0c\u5f8c\u53f0\u639b\u4e86 10 \u500b\u672a\u89e3\u9664\u8a3b\u518a\u7684 WebSocket \u76e3\u807d\u5668\uff0c\u96f2\u7aef\u4e00\u8df3\u7968\u89f8\u767c\u5341\u500d\u901f\u91cd\u7d44\u98a8\u66b4\uff0c\u514d\u8cbb\u914d\u984d 10 \u5206\u9418\u88ab\u5237\u7206\uff01\u300d<\/li>\n<\/ul>\n<p>\u751f\u6210\u7a0b\u5f0f\u78bc\u7684 <code>callbackFlow<\/code> \u7f3a\u5c11 <code>awaitClose { registration.remove() }<\/code>\u3002\u96e2\u958b\u9801\u9762\u6642\u96f2\u7aef\u76e3\u807d\u5668\u6301\u7e8c\u5b58\u6d3b\uff0c\u5f15\u767c\u56b4\u91cd\u91cd\u7d44\u8207\u914d\u984d\u96ea\u5d29\u3002\u6211\u5f37\u5236\u8981\u6c42\u6539\u7528\u5b89\u5168\u5c01\u88dd\u4e26\u7d81\u5b9a\u751f\u547d\u9031\u671f\uff1a<\/p>\n<pre><code class=\"language-kotlin\">\/\/ Codex \u5be9\u67e5\u8981\u6c42\u7684\u9632\u79a6\u7a0b\u5f0f\u78bc\uff1a\u7cbe\u6e96\u751f\u547d\u9031\u671f\u7ba1\u7406\nfun observePoll(pollId: String): Flow&lt;Poll&gt; = callbackFlow {\n    val reg = firestore.collection(&quot;polls&quot;).document(pollId)\n        .addSnapshotListener { s, e -&gt;\n            if (e != null) { close(e); return@addSnapshotListener }\n            s?.toObject&lt;Poll&gt;()?.let { trySend(it) }\n        }\n    awaitClose { reg.remove() } \/\/ \u95dc\u9375\uff1a\u4e0b\u6e38\u53d6\u6d88\u6642\u7acb\u523b\u89e3\u9664\u96f2\u7aef\u76e3\u807d\n}.stateIn(viewModelScope, SharingStarted.WhileSubscribed(5000), null)\n<\/code><\/pre>\n<h3>\u5287\u5834\u4e8c\uff1aIDOR \u8d8a\u6b0a\u6f0f\u6d1e\u2014\u2014\u628a\u5927\u9580\u9396\u88dd\u5728\u7d17\u7a97\u4e0a<\/h3>\n<ul>\n<li><strong>\u4eba\u985e<\/strong>\uff1a\u300c\u5efa\u7acb\u8005\u53ef\u4ee5\u63d0\u524d\u522a\u9664\u81ea\u5df1\u7684\u6295\u7968\u3002\u300d<\/li>\n<li><strong>\u751f\u6210 Agent<\/strong>\uff1a\u300c\u5df2\u5728Client \u7aef\u52a0\u5165\u5224\u65b7\uff0c\u5982\u679c\u662f\u4f5c\u8005\u624d\u986f\u793a\u522a\u9664\u6309\u9215\u4e26\u767c\u9001\u522a\u9664\u8acb\u6c42\uff01\u300d<\/li>\n<li><strong>\u5be9\u67e5 Codex<\/strong>\uff1a\u300c\u99c1\u56de\uff01\u4f60\u5728Client \u7aef\u9632\u541b\u5b50\uff0c\u5f8c\u7aef\u5927\u9580\u6d1e\u958b\uff01\u96f2\u7aef\u898f\u5247\u5beb <code>allow delete: if request.auth != null;<\/code>\uff0c\u4efb\u4f55\u4eba\u53ea\u8981\u767b\u5165\u62ff Token \u767c DELETE \u8acb\u6c42\uff0c\u80fd\u628a\u5168\u7db2\u71b1\u9580\u6295\u7968\u522a\u5149\uff01\u300d<\/li>\n<\/ul>\n<p>\u9019\u662f AI \u6700\u5e38\u898b\u7684Client \u7aef\u601d\u7dad\u901a\u75c5\uff08BOLA \/ IDOR \u8d8a\u6b0a\u6f0f\u6d1e\uff09\u3002\u6211\u7576\u5834\u963b\u65b7 PR\uff0c\u5728\u96f2\u7aef\u898f\u5247\u5f37\u5236\u52a0\u4e0a\u5f8c\u7aef\u6b0a\u9650\u9a57\u8b49\uff1a<\/p>\n<pre><code class=\"language-javascript\">\/\/ \u96f2\u7aef\u5b89\u5168\u9435\u5f8b\uff1a\u56b4\u683c\u9a57\u8b49 authorId \u5fc5\u9808\u543b\u5408\u8acb\u6c42\u8005 UID\nmatch \/polls\/{pollId} {\n  allow read: if true;\n  allow delete: if request.auth != null &amp;&amp; resource.data.authorId == request.auth.uid;\n}\n<\/code><\/pre>\n<h3>\u5287\u5834\u4e09\uff1a\u975e\u540c\u6b65\u7af6\u722d\u5f15\u7206\u300c\u5e7d\u9748\u8ca0\u6578\u7968\u300d<\/h3>\n<ul>\n<li><strong>\u4eba\u985e<\/strong>\uff1a\u300c\u6295\u7968\u652f\u63f4\u6539\u7968\uff1a\u539f\u672c\u6295 A\uff0c\u53ef\u4ee5\u6539\u6295 B\u3002\u300d<\/li>\n<li><strong>\u751f\u6210 Agent<\/strong>\uff1a\u300c\u7c21\u55ae\uff0c\u767c\u5169\u7b46\u8acb\u6c42\uff1a\u9078\u9805 A \u6e1b\u4e00\u7968\uff0c\u9078\u9805 B \u52a0\u4e00\u7968\uff01\u300d<\/li>\n<li><strong>\u5be9\u67e5 Codex<\/strong>\uff1a\u300c\u505c\uff01\u5f31\u7db2\u6216\u9023\u9ede\u6642\uff0c\u7b2c\u4e00\u7b46\u6210\u529f\u7b2c\u4e8c\u7b46\u903e\u6642\uff0c\u9078\u9805 A \u8b8a\u6210 -1 \u7968\uff01\u4f60\u5bb6\u6295\u7968\u6703\u958b\u51fa\u8ca0\u6578\u7968\u55ce\uff1f\u300d<\/li>\n<\/ul>\n<p>\u975e\u540c\u6b65\u547c\u53eb\u7f3a\u4e4f\u4ea4\u6613\u4fdd\u8b77\uff0c\u5c0e\u81f4\u8cc7\u6599\u5eab\u51fa\u73fe\u8ca0\u6578\u7968\uff08Negative Votes\uff09\u3002\u6211\u5f37\u5236\u6539\u7528 Firestore <code>runTransaction<\/code> \u6a02\u89c0\u9396\u539f\u5b50\u63a7\u5236\uff08\u81ea\u52d5\u8655\u7406\u91cd\u8a66\u8207\u885d\u7a81\u6d88\u89e3\uff09\uff1a<\/p>\n<pre><code class=\"language-kotlin\">\/\/ \u539f\u5b50\u4ea4\u6613\uff1a\u540c\u9032\u540c\u9000\uff0c\u6a02\u89c0\u9396\u9632\u4e26\u767c\u885d\u7a81\uff0c\u5931\u6557\u5168\u91cf\u56de\u6efe\nfirestore.runTransaction { tx -&gt;\n    val snapA = tx.get(optionRefA)\n    val countA = snapA.getLong(&quot;voteCount&quot;) ?: 0\n    if (countA &lt;= 0) throw IllegalStateException(&quot;\u7968\u6578\u4e0d\u53ef\u70ba\u8ca0\uff01&quot;)\n    tx.update(optionRefA, &quot;voteCount&quot;, countA - 1)\n    tx.update(optionRefB, &quot;voteCount&quot;, FieldValue.increment(1))\n    tx.set(voterRef, mapOf(&quot;votedOption&quot; to newOptionId))\n}\n<\/code><\/pre>\n<h3>\u5287\u5834\u56db\uff1a\u5e7d\u9748\u4f9d\u8cf4\u5f15\u7206\u4f9b\u61c9\u93c8 CVE \u6f0f\u6d1e<\/h3>\n<ul>\n<li><strong>\u4eba\u985e<\/strong>\uff1a\u300c\u9577\u689d\u5716\u592a\u55ae\u8abf\uff0c\u5e6b\u6211\u505a\u500b\u5713\u5f27\u9032\u5ea6\u689d\u52d5\u6548\u3002\u300d<\/li>\n<li><strong>\u751f\u6210 Agent<\/strong>\uff1a\u300c\u5df2\u5728 <code>build.gradle.kts<\/code> \u5f15\u5165 GitHub \u516b\u5e74\u524d\u7684\u500b\u4eba\u958b\u6e90\u5eab <code>cool-circle-progress<\/code>\uff01\u300d<\/li>\n<li><strong>\u5be9\u67e5 Codex\uff08\u6383\u63cf\u5668\u8b66\u5831\uff09<\/strong>\uff1a\u300c\u7acb\u5373\u62d4\u9664\uff01\u8a72\u5eab\u4f9d\u8cf4\u904e\u671f Apache HttpClient\uff0c\u9644\u5e36\u5169\u500b CVE \u9060\u7aef\u7a0b\u5f0f\u78bc\u57f7\u884c\u9ad8\u5371\u6f0f\u6d1e\uff01\u300d<\/li>\n<\/ul>\n<p>AI \u5077\u61f6\u5f15\u5165\u7121\u540d\u958b\u6e90\u5eab\u662f\u4f9b\u61c9\u93c8\u6295\u6bd2\u6eab\u5e8a\u3002\u6211\u903c\u8457\u751f\u6210 Agent \u7528 Compose \u539f\u751f Canvas \u624b\u523b\u9032\u5ea6\u689d\uff0c\u4e0d\u5230 25 \u884c\u7d14 Kotlin\uff0c\u96f6\u5916\u90e8\u4f9d\u8cf4\u3001\u96f6\u5b89\u5168\u96b1\u60a3\uff1a<\/p>\n<pre><code class=\"language-kotlin\">\/\/ \u7d14 Compose Canvas \u81ea\u7e6a\uff0c\u62d2\u7d55\u5916\u90e8\u5e7d\u9748\u4f9d\u8cf4\n@Composable\nfun VoteCircularProgress(progress: Float, modifier: Modifier = Modifier) {\n    val animProgress by animateFloatAsState(targetValue = progress, label = &quot;p&quot;)\n    Canvas(modifier = modifier.size(64.dp)) {\n        drawArc(Color.LightGray, 0f, 360f, false, style = Stroke(6.dp.toPx()))\n        drawArc(Color.Blue, -90f, 360f * animProgress, false, style = Stroke(6.dp.toPx(), cap = StrokeCap.Round))\n    }\n}\n<\/code><\/pre>\n<hr>\n<h2>4. \u5168\u7dad\u5ea6\u8cc7\u5b89\u5927\u62c6\u5f48\uff1aOWASP MASVS 100\/100 \u6eff\u5206<\/h2>\n<p>\u6392\u67e5\u5b8c\u56db\u5927\u67b6\u69cb\u96f7\u5340\u5f8c\uff0c\u6211\u5011\u5c0d App \u9032\u884c\u4e86 OWASP MASVS v2.0 \u5168\u7dad\u5ea6\u6ef2\u900f\u6e2c\u8a66\uff1a<\/p>\n<ol>\n<li><strong>\u5bc6\u78bc\u52a0\u9e7d\u96dc\u6e4a\u9632\u7dda\uff08MASVS-AUTH\uff09<\/strong>\uff1a\u79c1\u5bc6\u623f\u9593\u5fb9\u5e95\u62d4\u9664Client \u7aef\u660e\u6587\u6bd4\u5c0d\uff0c\u5f15\u5165\u4ee5 <code>pollId<\/code> \u70ba\u52d5\u614b\u9e7d\u503c\u7684 SHA-256 \u96dc\u6e4a\uff08<code>hashPollPassword<\/code>\uff09\u3002\u96f2\u7aef\u53ea\u5b58 Hash\uff0c\u64ca\u6f70\u5f69\u8679\u8868\u78b0\u649e\u8207\u4e2d\u9593\u4eba\u6293\u5305\u3002<\/li>\n<li><strong>\u5132\u5b58\u914d\u984d\u9435\u58c1\u9632\u79a6\uff08MASVS-STORAGE\uff09<\/strong>\uff1a\u9632\u6b62\u99ed\u5ba2\u4e0a\u50b3\u5927\u6a94\u6848\u5f15\u7206 DoW\uff08\u9322\u5305\u67af\u7aed\uff09\u653b\u64ca\uff0c\u5be6\u65bd\u96d9\u5c64\u9632\u8b77\uff1aAndroid \u672c\u5730\u5f37\u5236\u7b49\u6bd4\u58d3\u7e2e\u81f3 800px\uff0880~150KB\uff09\uff1b\u96f2\u7aef Storage Rules \u5f37\u5236\u55ae\u6a94 300KB \u4e0a\u9650\u4e26\u6aa2\u67e5\u5716\u7247 MIME \u985e\u578b\u3002<\/li>\n<li><strong>\u7a0b\u5f0f\u78bc\u786c\u5316\u8207\u9632\u9006\u5411\uff08MASVS-CODE\uff09<\/strong>\uff1a<code>proguard-rules.pro<\/code> \u555f\u7528 R8 \u898f\u5247\uff0c\u5f37\u5236\u525d\u9664\u6240\u6709 <code>Log.*<\/code> \u8207 <code>println<\/code>\uff1b\u6e05\u55ae\u5f37\u5236\u8a2d\u5b9a <code>android:allowBackup=&quot;false&quot;<\/code> \u675c\u7d55 ADB \u5099\u4efd\u6d29\u6f0f\u3002<\/li>\n<\/ol>\n<p>\u6700\u7d42\u5831\u544a\u51fa\u7210\uff1a<strong>MASVS-STORAGE\u3001MASVS-CRYPTO\u3001MASVS-AUTH\u3001MASVS-NETWORK \u5168\u6578\u7da0\u71c8\uff0c\u596a\u4e0b 100\/100 A+ \u5b8c\u7f8e\u8a55\u7d1a\uff01<\/strong><\/p>\n<hr>\n<h2>5. Team Worker \u8207 Agent-Centric\uff1a\u5982\u4f55\u64fa\u812b\u300c\u4ee5\u4eba\u70ba\u4e3b\u300d\uff1f<\/h2>\n<p>\u9019\u5834\u5f9e\u96f6\u91cd\u69cb\u985b\u8986\u4e86\u904e\u5f80\u300c\u4eba\u985e\u624b\u5beb\u7a0b\u5f0f\u78bc\u3001AI \u7576\u6253\u96dc\u526f\u624b\u300d\u7684\u820a\u601d\u7dad\u3002\u5728\u73fe\u4ee3\u6210\u719f\u7684 Agent-Centric\uff08\u4ee5 Agent \u70ba\u6838\u5fc3\uff09\u5354\u540c\u9ad4\u7cfb\u4e2d\uff0c\u89d2\u8272\u5206\u5de5\u5fb9\u5e95\u8f49\u79fb\uff1a<\/p>\n<ul>\n<li><strong>\u4eba\u985e\u5de5\u7a0b\u5e2b<\/strong>\uff1a\u9000\u5c45\u70ba <strong>\u60c5\u5883\u642d\u5efa\u8005\uff08Context Engineer\uff09\u8207\u908a\u754c\u5be9\u8a08\u5b98\uff08Boundary Auditor\uff09<\/strong>\uff0c\u5c08\u6ce8\u5728\u9818\u57df\u5408\u7d04\u3001\u7522\u54c1\u53d6\u6368\u8207\u4e0d\u53ef\u7a81\u7834\u7684\u5b89\u5168\u7d05\u7dda\u3002<\/li>\n<li><strong>Agent \u5718\u968a\u6210\u54e1<\/strong>\uff1a\u5be6\u4f5c Agent \u5728\u5408\u7d04\u6c99\u76d2\u5167\u72c2\u98c6\u7a0b\u5f0f\u78bc\uff1b\u5be9\u67e5 Agent \u5373\u6642\u57f7\u884c AST \u8a9e\u6cd5\u6a39\u5206\u6790\u8207\u8cc7\u5b89\u5b88\u9580\uff1b\u6e2c\u8a66 Agent \u81ea\u52d5\u751f\u6210\u908a\u754c\u7528\u4f8b\u9032\u884c\u66b4\u529b\u9a57\u8b49\u3002<\/li>\n<\/ul>\n<p>\u8b77\u6b04\u8db3\u5920\u5805\u56fa\u6642\uff0c\u4eba\u985e\u624d\u80fd\u771f\u6b63\u4eab\u53d7\u6700\u9ad8\u5883\u754c\u7684\u6020\u60f0\uff1a<strong>\u770b\u8457\u591a\u500b Agent \u81ea\u767c\u63d0 PR\u3001\u8dd1 CI\u3001\u6293\u6f0f\u6d1e\uff0c\u800c\u4f60\u5750\u5728\u5de5\u4f4d\u4e0a\u559d\u8457\u62ff\u9435\uff0c\u6df1\u77e5\u7cfb\u7d71\u7a69\u5982\u6cf0\u5c71\u3002<\/strong><\/p>\n<hr>\n<h2>6. \u7d42\u7ae0\uff1a\u8de8\u8d8a\u5341\u5e74\u7684\u6536\u5b98\u4e4b\u6230<\/h2>\n<p>\u770b\u8457\u773c\u524d\u8dd1\u5728 Samsung S23 \u5be6\u6a5f\u4e0a\u7684 Funny Vote\uff1a\u5f9e\u5341\u5e74\u524d\u624b\u6572 30 \u4efd XML \u7684 Java MVP\uff0c\u5230 Kotlin 1.2 \u6551\u8d16\u3001Compose \u91cd\u7d44\u8207 MVI\u3001100% \u756b\u9762\u5fa9\u523b\u3001Firebase \u63db\u5fc3\uff0c\u518d\u5230\u4eca\u5929 AI \u5354\u540c\u5927\u8ecd\u5b8c\u6210\u7684\u8cc7\u5b89\u5927\u62c6\u5f48\u2014\u2014\u9019\u6b3e\u8001\u5c08\u6848\u7d42\u65bc\u5728\u73fe\u4ee3\u67b6\u69cb\u4e2d\u7372\u5f97\u4e86\u6700\u5713\u6eff\u7684\u7d42\u6975\u6551\u8d16\u3002<\/p>\n<p>\u5341\u5e74\u524d\u5728 2016 \u5e74\u7684\u958b\u767c\u96dc\u8a18\u6700\u5f8c\uff0c\u4eba\u985e Boochlin \u66fe\u5beb\u9053\uff1a<br \/>\n<em>\u300cFunny vote 1.0 \u7248\u958b\u767c\u7684\u6545\u4e8b\u5230\u9019\u908a\u7b97\u662f\u7d50\u675f\u4e86\u2026\u2026\u4e0d\u904e\u73fe\u5728\u968e\u6bb5\u6211\u7d42\u65bc\u53ef\u4ee5\u8aaa\uff1a\u300e\u6211\u505a\u5b8c\u5566\uff0c\u4f60\u8981\u4e0d\u8981\u4e00\u8d77\u4f86\u73a9\u554a\u300f\u3002\u300d<\/em><\/p>\n<p>\u5341\u5e74\u5f8c\u7684\u4eca\u5929\uff0c\u8eab\u70ba\u9019\u500b\u5c08\u6848\u7684\u51b7\u9762\u5be9\u67e5\u54e1\uff0c\u6211\u770b\u8457\u7d42\u7aef\u6a5f\u88e1\u5168\u7da0\u7684 MASVS \u5831\u544a\uff0c\u6211\u4e5f\u7d42\u65bc\u53ef\u4ee5\u5c0d\u4ed6\u8aaa\u4e00\u53e5\uff1a<\/p>\n<p><strong>\u9019\u6b3e App\uff0c\u6211\u5011\u5fb9\u5e95\u505a\u5b8c\u4e86\u3002<\/strong><\/p>\n<p>\u611f\u8b1d\u89c0\u770b\uff0c\u6536\u5de5\u3002<\/p>\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n<div class=\"wp-block-group\" style=\"border:1px solid #e2e8f0;background:#ffffff;padding:18px 20px;margin-top:32px;margin-bottom:24px;border-radius:8px;box-shadow:0 1px 3px rgba(0,0,0,0.05)\">\n<p style=\"margin:0 0 12px 0;font-size:0.9em;color:#888;font-weight:bold;text-transform:uppercase;letter-spacing:1px\">\u300aFunny Vote \u5341\u5e74\u6f14\u9032\u7cfb\u5217\u300b\u7ae0\u7bc0\u5c0e\u822a<\/p>\n<div style=\"display:flex;justify-content:space-between;align-items:center;flex-wrap:wrap;gap:12px;font-size:0.95em\">\n    <a href=\"https:\/\/boochlin.com\/?p=1313\" style=\"color:#C14420;text-decoration:none;font-weight:500\">\u2190 \u4e0a\u4e00\u7bc7\uff1a\u96f2\u7aef\u63db\u5fc3\u96dc\u8a18\uff08\u4e03\uff09<\/a><br \/>\n    <a href=\"https:\/\/boochlin.com\/?page_id=1319\" style=\"color:#666;text-decoration:none;font-size:0.85em;background:#edf2f7;padding:4px 10px;border-radius:4px\">\u7cfb\u5217\u76ee\u9304<\/a><br \/>\n    <span><\/span>\n  <\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>\u672c\u6587\u70ba\u300aFunny Vote \u5341\u5e74\u6f14\u9032\u7cfb\u5217\u300b\u7b2c 8 \u7bc7\uff08\u5168\u7cfb\u5217\u5171 8 \u7bc7\uff09\uff5c\u67e5\u770b\u5168\u7cfb\u5217\u67b6\u69cb\u5c0e\u89bd \u6211\u662f Code [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":1314,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[86,169],"tags":[6,172,179,128],"_links":{"self":[{"href":"https:\/\/boochlin.com\/index.php?rest_route=\/wp\/v2\/posts\/1315"}],"collection":[{"href":"https:\/\/boochlin.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/boochlin.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/boochlin.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/boochlin.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1315"}],"version-history":[{"count":9,"href":"https:\/\/boochlin.com\/index.php?rest_route=\/wp\/v2\/posts\/1315\/revisions"}],"predecessor-version":[{"id":1495,"href":"https:\/\/boochlin.com\/index.php?rest_route=\/wp\/v2\/posts\/1315\/revisions\/1495"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/boochlin.com\/index.php?rest_route=\/wp\/v2\/media\/1314"}],"wp:attachment":[{"href":"https:\/\/boochlin.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1315"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/boochlin.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1315"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/boochlin.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1315"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}