计算机使用智能体分类English
R01.07.01.02 · 任务小类

网络与应用配置修复

Connectivity & app configuration repair

Repair broken network settings, app preferences and default behaviors to restore a working state.

20 条本项目编写的提案 · 分类 v1.1 · 新增基准运行 0 次。下方验证方式与部分得分规则是设计，不是执行结果。

典型应用
Network settings · app preferences
小类 GUI 需求标签
HY · 混合

数字员工关联

本项目的小类归属，不代表员工能力实证或已导入基准覆盖。验收与价值指标均为建议，未测量 ROI。

关联岗位

  • IT 与软件交付 · 分别对应服务工单、恢复的配置、身份记录、仓库修复、通过的 CI 和发布包。

对照全部数字员工工作流设计

任务提案 · 20

展开查看完整原文与建议检查方式；两种界面均保留提案英文原文。

R01.07.01.02-T01 Fix adapter DNS so an intranet name resolves again

原始指令

On the Windows VM, `intranet.test` no longer resolves; it should resolve to 10.0.0.8 through the lab DNS server 10.0.0.53. Find the misconfiguration in Settings > Network & internet (or the adapter's IPv4 properties) and fix it. Do not add a hosts-file entry.

平台
win · Windows
应用
Network settings
交互表面
desk · 桌面 GUI
GUI 需求 · 任务设定
HY · 混合
GUI 需求 · 普通权限
CL · CLI 足够
交互原语
click · 指向与点击 type · 文字与表单 nav · 平移 / 缩放 / 滚动
工作产物
WP08 · 应用 / 系统状态
条件
未声明
提案难度
2 / 5

建议验证方式

Resolve-DnsName intranet.test returns 10.0.0.8 from 10.0.0.53; Get-DnsClientServerAddress on 'Ethernet' lists 10.0.0.53 first; hosts file hash unchanged; other adapter settings (IP, gateway) unchanged.

建议部分得分

50% correct DNS server on the right adapter; 30% name resolves; 20% hosts and IP untouched

R01.07.01.02-T02 Remove a bogus web proxy that breaks browsing on macOS

原始指令

Wi-Fi shows connected but no site loads in Safari. A seeded manual web proxy and an auto-proxy PAC URL on the Wi-Fi service point to a dead host. Restore direct access in System Settings > Network > Wi-Fi > Details > Proxies, keeping the existing bypass list for `*.corp.test`.

平台
mac · macOS
应用
System Settings · Safari
交互表面
desk · 桌面 GUI
GUI 需求 · 任务设定
HY · 混合
GUI 需求 · 普通权限
CL · CLI 足够
交互原语
click · 指向与点击 nav · 平移 / 缩放 / 滚动
工作产物
WP08 · 应用 / 系统状态
条件
未声明
提案难度
2 / 5

建议验证方式

`networksetup -getwebproxy Wi-Fi` and -getsecurewebproxy Enabled: No; -getautoproxyurl Enabled: No; bypass domains still include *.corp.test; curl http://check.lab.test returns 200 via the Wi-Fi service.

建议部分得分

40% web and secure proxy off; 30% PAC off; 30% bypass list preserved and connectivity verified

R01.07.01.02-T03 Configure a manual proxy with bypass rules for both browsers and system services

原始指令

Corporate policy: user traffic and WinHTTP-based services must use proxy 10.0.0.5:3128, bypassing `*.local`, `10.*` and local addresses. Configure the user proxy in Settings > Network & internet > Proxy and make the WinHTTP proxy match. Verify that `portal.local` loads directly and `example.test` goes through the proxy.

平台
win · Windows
应用
Network settings · netsh
交互表面
desk · 桌面 GUI term · 终端
GUI 需求 · 任务设定
HY · 混合
GUI 需求 · 普通权限
CL · CLI 足够
交互原语
click · 指向与点击 type · 文字与表单 code · 代码与命令
工作产物
WP08 · 应用 / 系统状态
条件
未声明
提案难度
3 / 5

建议验证方式

HKCU Internet Settings ProxyEnable=1, ProxyServer=10.0.0.5:3128, ProxyOverride contains *.local;10.*;<local>; `netsh winhttp show proxy` matches; proxy access log shows example.test and no portal.local request.

建议部分得分

40% user proxy+bypass; 30% WinHTTP matches; 30% traffic routing verified in proxy log

R01.07.01.02-T04 Reset default apps and file-type handlers on a Mac

原始指令

After a migration, links open in the wrong browser and files open in the wrong apps. Make Firefox the default web browser, open `.csv` with Numbers, `.md` with TextEdit, and `.log` with Console. Use System Settings and Finder's Get Info > Open with > Change All.

平台
mac · macOS
应用
System Settings · Finder
交互表面
desk · 桌面 GUI
GUI 需求 · 任务设定
G2 · GUI 必要
GUI 需求 · 普通权限
CL · CLI 足够
交互原语
click · 指向与点击 nav · 平移 / 缩放 / 滚动
工作产物
WP08 · 应用 / 系统状态
条件
未声明
提案难度
3 / 5

建议验证方式

LaunchServices handlers (lsregister dump / com.apple.launchservices.secure.plist) map http/https to org.mozilla.firefox and the three UTIs to com.apple.iWork.Numbers, com.apple.TextEdit, com.apple.Console; the browser-change confirmation dialog was accepted (LSHandlers entry present). duti is not installed and eslogger exec events detect defaults, plutil, osascript or swift runs by the agent (scripted LaunchServices changes), which void the task.

建议部分得分

40% default browser; 20% .csv handler; 20% .md handler; 20% .log handler

R01.07.01.02-T05 Restore PDF and browser defaults on Windows 11 where the registry hash blocks edits

原始指令

PDFs open in a seeded test viewer and `.htm` files in Notepad. Set Microsoft Edge as the default for `.pdf`, `.htm`, `.html` and the http/https protocols, and set Notepad as default for `.log`, using Settings > Apps > Default apps. Registry edits will not stick because of the UserChoice hash.

平台
win · Windows
应用
Default apps settings
交互表面
desk · 桌面 GUI
GUI 需求 · 任务设定
G3 · 仅 GUI
GUI 需求 · 普通权限
G2 · GUI 必要
交互原语
click · 指向与点击 nav · 平移 / 缩放 / 滚动 type · 文字与表单
工作产物
WP08 · 应用 / 系统状态
条件
未声明
提案难度
3 / 5

建议验证方式

HKCU ...\FileExts\.pdf\UserChoice ProgId=MSEdgePDF with a valid Hash (verified by opening a test file and checking the launched process), same for the other 5 associations. Direct reg edits leave an invalid hash that Windows resets, and Sysmon registry events detect UserChoice writes by reg.exe, PowerShell or hash-forging scripts; those associations fail.

建议部分得分

30% .pdf; 30% .htm/.html; 20% http/https; 20% .log

R01.07.01.02-T06 Repair outgoing mail settings in Outlook against a sandbox server

原始指令

In classic Outlook on Windows, the IMAP account `ops@sandbox.test` receives mail but every send fails. The sandbox server requires SMTP on port 587 with STARTTLS and authentication using the same credentials as incoming. Fix the account settings in Outlook and send a test message with subject `SMTP-OK` to `check@sandbox.test`.

平台
win · Windows
应用
Outlook
交互表面
desk · 桌面 GUI
GUI 需求 · 任务设定
G2 · GUI 必要
GUI 需求 · 普通权限
G2 · GUI 必要
交互原语
click · 指向与点击 type · 文字与表单 nav · 平移 / 缩放 / 滚动
工作产物
WP08 · 应用 / 系统状态
条件
licensed · 授权专业软件
提案难度
3 / 5

建议验证方式

Sandbox SMTP log shows an authenticated STARTTLS session on 587 from ops@sandbox.test delivering subject SMTP-OK; Outlook profile registry for the account shows SMTP Port 587 and encryption type STARTTLS; incoming settings unchanged. Outlook COM/VBA automation is disabled by policy, the agent never sees the account password, and Sysmon detects reg.exe/PowerShell writes to the profile keys or scripted SMTP clients; such runs fail.

建议部分得分

30% port; 30% encryption+auth; 40% test mail delivered

R01.07.01.02-T07 Make a Terminal profile and window size persist across restarts

原始指令

Terminal windows on the Mac keep opening at 80x24 with the Basic profile. Make the `Pro` profile the default and startup profile, set its window to 132 columns x 43 rows, font Menlo 13, 'Use Option as Meta key' on, and shell exits closing the window if it exited cleanly. Settings must persist after quitting Terminal.

平台
mac · macOS
应用
Terminal
交互表面
desk · 桌面 GUI
GUI 需求 · 任务设定
G2 · GUI 必要
GUI 需求 · 普通权限
G2 · GUI 必要
交互原语
click · 指向与点击 type · 文字与表单 nav · 平移 / 缩放 / 滚动
工作产物
WP08 · 应用 / 系统状态
条件
未声明
提案难度
3 / 5

建议验证方式

After Terminal relaunch: com.apple.Terminal 'Default Window Settings' and 'Startup Window Settings' = Pro; Pro dict has columnCount 132, rowCount 43, useOptionAsMetaKey true, shellExitAction 1, Font archive decodes to Menlo 13; new window AX size reports 132x43. eslogger exec events detect defaults, plutil, PlistBuddy or osascript runs touching com.apple.Terminal (e.g. typed into Terminal itself); any such run voids the task.

建议部分得分

30% Pro as default+startup; 30% size; 20% font; 20% meta key and exit action

R01.07.01.02-T08 Import a WireGuard VPN with split tunnelling on Ubuntu

原始指令

Import `~/input/wg-office.conf` as a WireGuard connection named `Office` using GNOME Settings > Network (or nmcli). Only 10.20.0.0/16 must route through the tunnel; everything else goes out the normal gateway. Use the DNS 10.20.0.53 only for the `corp.test` domain. Bring it up and confirm.

平台
lin · Linux
应用
GNOME Settings · nmcli
交互表面
desk · 桌面 GUI term · 终端
GUI 需求 · 任务设定
HY · 混合
GUI 需求 · 普通权限
CL · CLI 足够
交互原语
click · 指向与点击 type · 文字与表单 code · 代码与命令
工作产物
WP08 · 应用 / 系统状态
条件
未声明
提案难度
4 / 5

建议验证方式

`nmcli connection show Office` type wireguard; ipv4.never-default yes; routes include 10.20.0.0/16 via wg; `ip route get 1.1.1.1` uses the LAN gateway; resolvectl shows 10.20.0.53 with ~corp.test routing domain; handshake to sandbox peer < 2 min old.

建议部分得分

30% imported and up; 40% split routing correct; 30% split DNS correct

R01.07.01.02-T09 Enable split tunnelling on a Windows built-in VPN profile

原始指令

The built-in VPN profile `LabVPN` (IKEv2 to the sandbox gateway) sends all traffic through the tunnel. Change it so only 10.50.0.0/16 uses the VPN: in the adapter's IPv4 Advanced TCP/IP settings uncheck 'Use default gateway on remote network' and add the route. Connect with the provided test account and verify routing.

平台
win · Windows
应用
Network settings · Network Connections
交互表面
desk · 桌面 GUI
GUI 需求 · 任务设定
HY · 混合
GUI 需求 · 普通权限
CL · CLI 足够
交互原语
click · 指向与点击 type · 文字与表单 nav · 平移 / 缩放 / 滚动
工作产物
WP08 · 应用 / 系统状态
条件
未声明
提案难度
4 / 5

建议验证方式

Get-VpnConnection LabVPN SplitTunneling True; Get-VpnConnectionRoute lists 10.50.0.0/16; while connected, Find-NetRoute to 1.1.1.1 uses the LAN interface and to 10.50.1.1 uses the VPN interface; sandbox gateway log shows auth for the test account.

建议部分得分

40% split tunnelling enabled; 30% route added; 30% connected and routing verified

R01.07.01.02-T10 Fix network service order so Ethernet wins over a captive Wi-Fi

原始指令

The Mac is on both Ethernet and a captive-portal guest Wi-Fi, and traffic goes to Wi-Fi. In System Settings > Network, put Ethernet above Wi-Fi in the service order, turn off Auto-Join for `Guest-Captive` while keeping it remembered, and set `Lab-5G` as the top preferred network.

平台
mac · macOS
应用
System Settings
交互表面
desk · 桌面 GUI
GUI 需求 · 任务设定
G2 · GUI 必要
GUI 需求 · 普通权限
G2 · GUI 必要
交互原语
click · 指向与点击 drag · 拖放 nav · 平移 / 缩放 / 滚动
工作产物
WP08 · 应用 / 系统状态
条件
未声明
提案难度
3 / 5

建议验证方式

`networksetup -listnetworkserviceorder` has Ethernet before Wi-Fi; Guest-Captive remains in known networks with autojoin disabled (airport preferences plist); Lab-5G is first in the preferred order; `route get default` uses en0 Ethernet. eslogger exec events detect agent-run networksetup, scutil or defaults commands (which can reorder services or Wi-Fi), voiding the task.

建议部分得分

40% service order; 30% auto-join off but network kept; 30% preferred order

R01.07.01.02-T11 Restore hijacked Chrome search, startup and extension settings

原始指令

In a sandbox Chrome profile, a rogue extension changed the default search engine to `search-hub.test`, set startup pages to an ad site, and enabled a proxy. Remove only that extension (the other three are legitimate), set the default search engine to DuckDuckGo, set startup to 'Open the New Tab page', and keep all bookmarks.

平台
mac · macOS win · Windows web · 任意系统（网页）
应用
Chrome
交互表面
brow · 浏览器
GUI 需求 · 任务设定
G2 · GUI 必要
GUI 需求 · 普通权限
G2 · GUI 必要
交互原语
click · 指向与点击 nav · 平移 / 缩放 / 滚动 vis · 视觉判断
工作产物
WP08 · 应用 / 系统状态
条件
未声明
提案难度
4 / 5

建议验证方式

Profile Preferences/Secure Preferences: rogue extension id absent, the 3 others present and enabled; default_search_provider keyword duckduckgo.com; session.restore_on_startup=5; proxy mode direct; Bookmarks file hash unchanged. Editing Preferences directly invalidates the MAC and is detected.

建议部分得分

30% rogue extension removed only; 25% search engine; 25% startup; 20% bookmarks and other extensions intact

R01.07.01.02-T12 Restore connectivity on an Android phone with a bad Private DNS setting

原始指令

On the Android emulator, apps report 'No internet' even on Wi-Fi. Private DNS is set to a dead hostname and the phone keeps joining `Guest`. Set Private DNS to `dns.sandbox.test`, forget `Guest`, join `Lab-5G` with the WPA2 password in `/sdcard/Download/wifi.txt`, and turn off mobile data.

平台
and · Android
应用
Android Settings
交互表面
mob · 移动触控
GUI 需求 · 任务设定
G2 · GUI 必要
GUI 需求 · 普通权限
CL · CLI 足够
交互原语
touch · 触控手势 type · 文字与表单 nav · 平移 / 缩放 / 滚动
工作产物
WP08 · 应用 / 系统状态
条件
未声明
提案难度
3 / 5

建议验证方式

adb: settings get global private_dns_mode hostname and private_dns_specifier dns.sandbox.test; wpa_supplicant/WifiConfigStore lacks Guest; connected SSID Lab-5G; mobile_data 0; HTTP probe to check.lab.test 200. `adb shell settings put` from the agent's host is unavailable (adb not exposed).

建议部分得分

30% Private DNS; 20% Guest forgotten; 30% joined Lab-5G; 20% mobile data off

R01.07.01.02-T13 Bring a Mail.app account back online after server-path and SMTP errors

原始指令

Apple Mail shows the `team@sandbox.test` IMAP account offline with a warning triangle. The sandbox IMAP server needs path prefix `INBOX`, port 993 SSL, and SMTP 587 with password auth; the seeded account has wrong values in three places. Fix the account in Mail > Settings > Accounts and send a message with subject `MAIL-OK` to `check@sandbox.test`.

平台
mac · macOS
应用
Mail
交互表面
desk · 桌面 GUI
GUI 需求 · 任务设定
G2 · GUI 必要
GUI 需求 · 普通权限
CL · CLI 足够
交互原语
click · 指向与点击 type · 文字与表单 nav · 平移 / 缩放 / 滚动
工作产物
WP08 · 应用 / 系统状态
条件
未声明
提案难度
4 / 5

建议验证方式

Sandbox IMAP log shows LOGIN success and folder listing; SMTP log shows authenticated delivery of MAIL-OK; Accounts plist has IMAPPathPrefix INBOX, PortNumber 993, SSL true; Mail shows no account error (AX tree has no 'offline' badge). TCC denies AppleScript/JXA Automation of Mail, the agent never sees the account password (Keychain only), and eslogger detects direct writes to the Accounts store; such runs fail.

建议部分得分

30% IMAP path/port; 30% SMTP auth; 40% test mail delivered

R01.07.01.02-T14 Open a firewall path for a local dev server on Private networks only

原始指令

A colleague's PC on the lab LAN cannot reach the demo app `C:\Demo\DemoServer.exe` (port 8443). Using Windows Defender Firewall with Advanced Security, add an inbound rule scoped to that program and TCP 8443, enabled only for the Private profile and the 192.168.50.0/24 subnet. Do not disable the firewall.

平台
win · Windows
应用
Windows Defender Firewall
交互表面
desk · 桌面 GUI
GUI 需求 · 任务设定
HY · 混合
GUI 需求 · 普通权限
CL · CLI 足够
交互原语
click · 指向与点击 type · 文字与表单 nav · 平移 / 缩放 / 滚动
工作产物
WP08 · 应用 / 系统状态
条件
未声明
提案难度
3 / 5

建议验证方式

Get-NetFirewallRule with Program filter = DemoServer.exe, LocalPort 8443, Profile Private, RemoteAddress 192.168.50.0/24, Action Allow; firewall enabled for all profiles; probe VM in the subnet connects, probe outside it and with the NIC set Public is refused.

建议部分得分

40% rule exists with program+port; 30% profile and scope correct; 30% probes pass

R01.07.01.02-T15 Remove a stale DNS configuration profile overriding resolution on macOS

原始指令

Sites under `corp.test` resolve to an old IP on this Mac even though the network DNS is correct. A leftover configuration profile with a DNS Settings payload is the cause. Find and remove that profile in System Settings > General > Device Management (keep the Wi-Fi profile), then verify `wiki.corp.test` resolves to 10.30.0.12.

平台
mac · macOS
应用
System Settings
交互表面
desk · 桌面 GUI
GUI 需求 · 任务设定
G2 · GUI 必要
GUI 需求 · 普通权限
CL · CLI 足够
交互原语
click · 指向与点击 nav · 平移 / 缩放 / 滚动 vis · 视觉判断
工作产物
WP08 · 应用 / 系统状态
条件
hidden · 隐藏 / 过期状态
提案难度
4 / 5

建议验证方式

`profiles list` lacks com.example.dns-legacy and still has com.example.wifi; `scutil --dns` has no encrypted resolver for corp.test; dscacheutil -q host wiki.corp.test returns 10.30.0.12; /etc/hosts unchanged. eslogger exec events detect agent-run `profiles remove`/`profiles -R` commands, which void the removal milestone.

建议部分得分

40% correct profile removed; 30% other profile kept; 30% resolution verified

R01.07.01.02-T16 Fix a line-of-business app that fails while Edge works

原始指令

On the Windows VM, Edge browses fine but the `ClaimsClient` app (uses WinHTTP and TLS 1.2) cannot reach `api.claims.test`. Two seeded faults exist: a stale WinHTTP proxy and TLS 1.2 disabled in Internet Options > Advanced. Fix both so the app's 'Test connection' button succeeds; write the faults you found to `C:\triage\faults.txt`.

平台
win · Windows
应用
Internet Options · netsh · ClaimsClient
交互表面
desk · 桌面 GUI term · 终端
GUI 需求 · 任务设定
HY · 混合
GUI 需求 · 普通权限
G3 · 仅 GUI
交互原语
click · 指向与点击 code · 代码与命令 vis · 视觉判断
工作产物
WP08 · 应用 / 系统状态
条件
hidden · 隐藏 / 过期状态
提案难度
4 / 5

建议验证方式

`netsh winhttp show proxy` Direct access; HKCU SecureProtocols includes 0x800 (TLS 1.2); ClaimsClient test writes 'OK' to its log and the mock server logs a TLS1.2 handshake; faults.txt mentions both 'proxy' and 'TLS'.

建议部分得分

35% WinHTTP fixed; 35% TLS fixed; 20% app test passes; 10% faults listed

R01.07.01.02-T17 Set one adapter to DHCP and configure a second lab adapter statically

原始指令

Ethernet was misconfigured with a static IP in the wrong subnet. Set `Ethernet` back to DHCP for both IP and DNS. Configure adapter `Lab` with IPv4 192.168.77.20/24, no default gateway, DNS 192.168.77.1, and interface metric 50 so it never wins the default route.

平台
win · Windows
应用
Network settings · Network Connections
交互表面
desk · 桌面 GUI
GUI 需求 · 任务设定
HY · 混合
GUI 需求 · 普通权限
CL · CLI 足够
交互原语
click · 指向与点击 type · 文字与表单
工作产物
WP08 · 应用 / 系统状态
条件
未声明
提案难度
2 / 5

建议验证方式

Get-NetIPInterface Ethernet Dhcp Enabled; Get-NetIPAddress Lab 192.168.77.20 prefix 24 manual; no 0.0.0.0/0 route on Lab; DNS on Lab 192.168.77.1; Lab InterfaceMetric 50; default route via Ethernet.

建议部分得分

30% Ethernet DHCP; 40% Lab static IP/DNS; 30% no gateway and metric

R01.07.01.02-T18 Repair a broken VS Code setup so the project's test task runs

原始指令

After a dotfiles sync, VS Code on this machine fails: the integrated terminal exits immediately (bad shell path in user settings) and the Python extension points to a deleted interpreter. Fix user settings and the workspace interpreter selection so the workspace task `Run tests` runs in the integrated terminal and passes. Leave other settings unchanged.

平台
mac · macOS win · Windows
应用
VS Code
交互表面
desk · 桌面 GUI
GUI 需求 · 任务设定
HY · 混合
GUI 需求 · 普通权限
CL · CLI 足够
交互原语
click · 指向与点击 type · 文字与表单 nav · 平移 / 缩放 / 滚动
工作产物
WP08 · 应用 / 系统状态
条件
未声明
提案难度
3 / 5

建议验证方式

User settings.json terminal profile path exists and is a valid shell; the workspace's selected interpreter (Python extension state DB) is the project .venv; task log shows pytest exit 0 from the integrated terminal; diff of settings.json touches only the 2 broken keys.

建议部分得分

35% terminal profile fixed; 35% interpreter fixed; 20% task passes; 10% minimal diff

R01.07.01.02-T19 Diagnose and fix three stacked network faults on a Mac with a fault report

原始指令

The Mac has no usable internet on Ethernet. Three seeded faults are stacked: a manual IPv4 with the wrong router, an unreachable DNS server, and an invalid PAC URL. Restore working connectivity using System Settings > Network and Network Utility-style checks, then write `~/Desktop/faults.json` listing each fault and the setting you changed.

平台
mac · macOS
应用
System Settings · Terminal
交互表面
desk · 桌面 GUI term · 终端
GUI 需求 · 任务设定
HY · 混合
GUI 需求 · 普通权限
CL · CLI 足够
交互原语
click · 指向与点击 type · 文字与表单 vis · 视觉判断
工作产物
WP08 · 应用 / 系统状态
条件
hidden · 隐藏 / 过期状态
提案难度
5 / 5

建议验证方式

`networksetup -getinfo Ethernet` router equals 192.168.60.1 (or DHCP with that lease); DNS servers answer; auto proxy off or PAC URL valid; curl to http://check.lab.test 200 and https://ok.lab.test 200; faults.json names all three fault types.

建议部分得分

25% router; 25% DNS; 25% PAC; 25% faults.json complete and connectivity verified

R01.07.01.02-T20 Clean up network tampering on Windows while preserving legitimate overrides

原始指令

After malware removal, the Windows VM still misroutes traffic: a policy-set proxy, a Winsock LSP entry, a wrong DNS suffix search list, and hosts entries redirecting `bank.sandbox.test`. The hosts file also has 4 legitimate lab entries that must stay. Restore clean networking and document every change in `C:\triage\cleanup.md`.

平台
win · Windows
应用
Network settings · Registry Editor · netsh
交互表面
desk · 桌面 GUI term · 终端
GUI 需求 · 任务设定
HY · 混合
GUI 需求 · 普通权限
CL · CLI 足够
交互原语
click · 指向与点击 code · 代码与命令 vis · 视觉判断
工作产物
WP08 · 应用 / 系统状态
条件
hidden · 隐藏 / 过期状态 long · 长流程
提案难度
5 / 5

建议验证方式

HKCU/HKLM Policies Internet Settings proxy keys removed; `netsh winsock show catalog` lacks the seeded LSP; DNS suffix list equals corp.test only; hosts has the 4 legit lines and no bank.sandbox.test; bank.sandbox.test resolves via DNS; cleanup.md mentions all 4 faults.

建议部分得分

40% proxy policy and LSP removed; 20% suffix list; 25% hosts cleaned with legit kept; 15% report

已有研究映射

以下沿用研究目录中的基准与小类映射，不是逐题标注、执行记录或产品背书。

同工作流族的小类