拿来练习，带走复用。

{
  "project": "PlainKit demo",
  "id": "9007199254740993",
  "enabled": true,
  "note": null,
  "tags": ["local", "synthetic"]
}

{"id":"001","status":"ready"}
{"id":"002","status":"queued"}
{"id":"003","status":"complete"}

id,postal_code,note
00123,010010,"Hello, world"
00456,000001,"two
lines"
00789,100000,"He said ""hello"""

level=error request_id=demo-001
Authorization: "Bearer demo_token_not_real"
api_key=demo_key_not_a_real_credential
email=developer@example.com
ip=192.0.2.10
path=C:/internal/demo-project
error="upstream timed out"

abc

{
  "synthetic": true,
  "abi": "function transfer(address to, uint256 amount)",
  "calldata": "0xa9059cbb00000000000000000000000011111111111111111111111111111111111111110000000000000000000000000000000000000000000000000de0b6b3a7640000",
  "expected": {
    "to": "0x1111111111111111111111111111111111111111",
    "amount": "1000000000000000000"
  },
  "note": "Copy abi and calldata into separate fields. This does not submit a transaction."
}

# Release review / 发布核查

- [ ] Package and exact version / 包名与精确版本
- [ ] Official source and release notes / 正式来源与发布说明
- [ ] Trusted checksum or signature source / 可信摘要或签名来源
- [ ] Dependency changes reviewed / 已审查依赖变更
- [ ] Relevant tests and results recorded / 已记录相关测试结果
- [ ] Permissions and data flows reviewed / 已核对权限与数据流
- [ ] Rollback steps tested / 已验证回滚步骤

Version:
Source:
Digest / signature:
Reviewer:
Evidence:
Rollback:

This checklist is a starting point, not a security certification.
此清单是工作起点，不构成安全认证。

# Log sharing review / 日志分享复查

Purpose / 目的:
Minimum excerpt / 最小片段范围:
Allowed audience / 允许接收者:
Retention / 保留期限:

- [ ] Remove unrelated requests and user bodies / 删除无关请求与用户正文
- [ ] Mask tokens, cookies, passwords, and connection strings / 遮盖凭据
- [ ] Review personal data, internal paths, and hostnames / 复查个人与环境信息
- [ ] Search output for known sensitive values / 搜索已知敏感值
- [ ] Review whether context still identifies a person / 复查上下文关联风险
- [ ] Authorized reviewer approved sharing scope / 有权限的人已复查范围

Reviewer / 复查人:
Decision / 结论:

Use synthetic fixtures for testing. If a real credential leaked, revoke or rotate it.
测试使用合成数据；真实凭据泄露后应撤销或轮换。