企业 rollout

1. Provider / 身份
   ├─ Anthropic Team / Enterprise 直连?
   │  ├─ 是: 使用组织身份、SSO/SCIM、server-managed settings、analytics dashboard
   │  └─ 否: 使用 Passion8/custom gateway、企业 IdP、网关 key 映射和本地/端点策略
   └─ API Key 归属: 个人、团队服务账号、项目 token、短期 token

2. 网络
   ├─ 直连 api.anthropic.com / claude.ai / downloads.claude.ai?
   ├─ 走企业代理、TLS inspection、CA、mTLS?
   └─ 走 Passion8/custom gateway? 明确 Base URL、allowlist、重试、限流和日志边界

3. Settings 下发
   ├─ server-managed settings: 官方云端下发,适合 Anthropic 官方组织管控
   └─ endpoint-managed settings: MDM、注册表、系统文件、本地模板,适合强管控和自定义网关

4. 权限模型
   ├─ 默认权限: allow / ask / deny
   ├─ Auto mode: environment / allow / soft_deny / hard_deny
   └─ 禁止 bypass、限制敏感文件、限制危险 shell、隔离高风险项目

5. MCP
   ├─ 禁用、固定部署、批准目录、只允许插件、denylist
   ├─ managed-mcp.json 走系统路径,不能靠 server-managed settings 下发
   └─ OAuth、headersHelper、环境变量和 token 存储分开治理

6. 观测
   ├─ Adoption: 活跃用户、会话数、接受率、PR/代码贡献
   ├─ Cost: spend、token、模型、项目、团队、缓存命中
   ├─ Tools: Bash、Edit、MCP、Hooks、Auto mode 决策
   └─ Errors: 鉴权、网络、provider 4xx/5xx、工具失败、策略拒绝

7. 培训 / 支持
   ├─ 试点用户、冠军用户、项目模板、默认权限说明
   ├─ 常见排错: Base URL、Token、代理、CA、MCP、settings 合并
   └─ 支持队列: Slack/飞书、工单、升级路径、变更公告

{
  "autoMode": {
    "environment": [
      "Company source code lives under github.example.com/acme and approved internal GitLab groups.",
      "Production credentials are never available in developer workstations.",
      "Approved package registries are npm.corp.example.com and pypi.corp.example.com.",
      "Network egress goes through the corporate proxy and approved gateways."
    ],
    "allow": [
      "$defaults",
      "Read(./src/**)",
      "Read(./docs/**)",
      "Edit(./src/**)",
      "Edit(./tests/**)",
      "Bash(npm test)",
      "Bash(npm run lint)",
      "Bash(git diff *)"
    ],
    "soft_deny": [
      "Bash(npm install *)",
      "Bash(pip install *)",
      "WebFetch(*)",
      "mcp__jira__create_*"
    ],
    "hard_deny": [
      "Read(./.env)",
      "Read(./.env.*)",
      "Read(./secrets/**)",
      "Read(./**/*private_key*)",
      "Bash(curl * | sh)",
      "Bash(rm -rf *)",
      "Bash(git push *)",
      "mcp__prod_database__write_*"
    ]
  }
}