Sentinel Vault: Runs on Atlassian AI apps

说明与用途

Sentinel Vault 使用 Atlassian Forge LLMs API 对 Confluence 内容进行审核，无需外部 API 密钥或数据外流。生产版本符合 Runs on Atlassian 要求，但开发版本可能通过 Web 触发器外流数据。AI 审核默认关闭，仅管理员可启用，且令牌费用计入供应商的 Forge 账单。

问题

Confluence admins must decide whether to enable AI review in Sentinel Vault, but the marketing claim of no external data egress and no API key may be misleading without code verification.

结果

The app satisfies the Runs on Atlassian badge requirements in production, but the development build can egress data via a web trigger. AI review is disabled by default and requires admin activation; token usage is billed to the vendor’s Forge account.

工作流

• 1. Review the app’s manifest.yml for external permissions and modules.
• 2. Run forge eligibility on production and development builds to check Runs on Atlassian eligibility.
• 3. Inspect the deployment script scripts/deploy-prod.sh to confirm removal of dev modules.
• 4. Examine default configuration in logic.js to verify AI is off by default.
• 5. Verify that only admins can trigger AI reviews and that token usage is billed to the vendor’s Forge account.

证据

Sentinel Vault is one of the Runs on Atlassian apps that review Confluence content with AI, through the Forge LLMs API, with no API key to paste and no external data egress declared.

来源

$ forge eligibility -e production The version of your app [6.5.0] that's deployed to [production] is eligible for the Runs on Atlassian program.

来源

$ forge eligibility -e development The version of your app [8.98.0] that's deployed to [development] is not eligible for the Runs on Atlassian program. - App is using a webtrigger module that can egress data

来源

The default configuration in logic.js sets the validation engine's master switch to enabled: false. AI has its own switch, ai: { enabled: false, ... }

来源

Token costs bill to the app vendor's Forge bill, so we enforce a Haiku-only policy (see isForgeLlmModelAllowed) at every layer.

来源