Create or refine a concise, normative security policy ("Blue Book") for sensitive applications. Use when users need a threat model, data classification rules, auth/session policy, logging and audit requirements, retention/deletion expectations, incident response, or security...

为敏感应用创建或优化一份简洁规范的安全策略（《蓝皮书》），适用于用户需要威胁模型、数据分类规则、认证与会话策略、日志与审计要求、数据保留与删除规范、事件响应及其他安全要素的场景