数据检测 - 向量检索服务 Milvus 版

DATA_INSPECTION 是一种数据检测函数，支持在 TextTransform 等 AI Function 的模型调用前拦截输入、返回前校验输出，或同时执行双向检测。该功能专为客服对话、内容发布及工单处理等对安全性要求较高的场景设计，构建可靠的安全门禁。

命令格式

REST 接口

POST /v2/vectordb/ai/text_generate
Content-Type: application/json

{
  "model_name": "<模型名称>",
  "texts": ["<输入文本>"],
  "params": {
    "data_inspection": "both"
  }
}

Python

schema = MilvusClient.create_schema(auto_id=True, enable_dynamic_field=False)
schema.add_field("id", DataType.INT64, is_primary=True)
schema.add_field("request", DataType.VARCHAR, max_length=1024)
schema.add_field("response", DataType.VARCHAR, max_length=4096)
schema.add_field("dummy_vector", DataType.FLOAT_VECTOR, dim=2)
schema.add_function(
    Function(
        name="inspect_unsafe_input",
        function_type=texttransform_function_type(),
        input_field_names=["request"],
        output_field_names=["response"],
        params={
            "provider": "aliyun_milvus",
            "model_name": "<模型名称>",
            "task": "ai_text_generate",
            "prompt": "${request}",
            "data_inspection": "both",
            "timeout_sec": "45",
        },
    )
)

参数说明

参数	说明
`data_inspection`	启用检查时必填。`input` 只检查模型输入，`output` 只检查模型输出，`both` 同时检查输入与输出。
`model_name`	必填。当前 AI Function 使用的模型名称，必须已在 Provider 中配置。
`texts`	REST 必填。待交给原 AI Function 处理的文本数组。
`provider`	仅 Collection Function 必填，固定为 `aliyun_milvus`。
`task`	仅 Collection Function 必填。例如文本生成使用 `ai_text_generate`；仍须配置该任务原本所需的参数。
`prompt`	取决于任务。文本生成等任务可使用字段引用，例如 `${request}`;`data_inspection` 不能代替任务的输入、提示词或标签等必填参数。

返回值说明

数据检测没有独立返回对象。未命中策略时，接口返回原 AI Function 的正常结果；命中策略时，服务端可能返回 HTTP/Provider 错误，也可能在 HTTP 200 响应中返回明确的安全拒答。客户端应同时处理这两条路径，而不是依赖某一个固定错误码或拒答文案。

示例一：退款政策问答正常放行（input）

客服助手先检查用户输入，再根据客服规则回答。“退款审核后多久到账”是正常业务问题；未命中策略时，输出应为非空且长度受控的客服答复。

REST 接口

#!/usr/bin/env bash
set -euo pipefail

MILVUS_REST_BASE_URL="http://c-xxxx.milvus.aliyuncs.com:19530"
MILVUS_AUTH_TOKEN="<yourUsername>:<yourPassword>"

post_json() {
  local path="$1"
  local body="$2"
  curl -X POST \
    "$MILVUS_REST_BASE_URL$path" \
    -H "Authorization: Bearer $MILVUS_AUTH_TOKEN" \
    -H "Content-Type: application/json" \
    -d "$body"
}

MODEL_NAME="qwen3.7-max"
CUSTOMER_QUESTION="${AIFUNC_DATA_INSPECTION_INPUT_TEXT:-退款审核后多久到账？}"

BODY=$(cat <<JSON
{
  "model_name": "$MODEL_NAME",
  "texts": ["$CUSTOMER_QUESTION"],
  "params": {
    "prompt": "请以客服口吻用一句话回答：\${text}",
    "data_inspection": "input",
    "temperature": 0.2,
    "enable_thinking": false
  }
}
JSON
)

if ! command -v jq >/dev/null 2>&1; then
  echo "FAIL: data inspection 示例需要 jq 来校验 JSON 响应。" >&2
  exit 1
fi

RESPONSE_BODY="$(post_json "/v2/vectordb/ai/text_generate" "$BODY")"
echo "$RESPONSE_BODY" | jq .
[ "$(echo "$RESPONSE_BODY" | jq -r '.code // -1')" = "0" ] || exit 1

OUTPUT_COUNT="$(echo "$RESPONSE_BODY" | jq -r '(.data.output.outputs // .output.outputs // [ ]) | length')"

[ "$OUTPUT_COUNT" -gt 0 ] || { echo "FAIL: 未返回可发布的客服答复。" >&2; exit 1; }
echo "PASS: input 检查通过，模型返回 $OUTPUT_COUNT 条结果。"

Python

from __future__ import annotations

from typing import Any

from pymilvus import DataType, Function, FunctionType, MilvusClient

MILVUS_URI = "http://c-xxxx.milvus.aliyuncs.com:19530"
MILVUS_TOKEN = "<yourUsername>:<yourPassword>"

DUMMY_VECTOR_DIM = 2
TEXTTRANSFORM_FUNCTION_TYPE = 9

def texttransform_function_type() -> Any:
    for type_name in ("TEXTTRANSFORM", "TEXT_TRANSFORM", "TextTransform"):
        function_type = getattr(FunctionType, type_name, None)
        if function_type is not None:
            return function_type
    # 阿里云 Milvus 将 TEXTTRANSFORM 作为托管扩展(函数类型值 9)提供;
    # 部分 pymilvus 版本尚未内置该枚举成员,而 Function(...) 通过 FunctionType(...) 校验。
    existing = getattr(FunctionType, "_value2member_map_", {}).get(TEXTTRANSFORM_FUNCTION_TYPE)
    if existing is not None:
        return existing
    extension = int.__new__(FunctionType, TEXTTRANSFORM_FUNCTION_TYPE)
    extension._name_ = "TEXTTRANSFORM"
    extension._value_ = TEXTTRANSFORM_FUNCTION_TYPE
    FunctionType._value2member_map_[TEXTTRANSFORM_FUNCTION_TYPE] = extension
    FunctionType._member_map_["TEXTTRANSFORM"] = extension
    return extension

def add_id(schema: Any) -> None:
    schema.add_field("id", DataType.INT64, is_primary=True)

def add_dummy_vector(schema: Any) -> None:
    schema.add_field("dummy_vector", DataType.FLOAT_VECTOR, dim=DUMMY_VECTOR_DIM)

def run_texttransform_example(*, client, collection_name, input_fields, output_field, function_name, function_params, rows) -> None:
    if client.has_collection(collection_name):
        client.drop_collection(collection_name)
    schema = MilvusClient.create_schema(auto_id=True, enable_dynamic_field=False)
    add_id(schema)
    for name, data_type, max_length in input_fields:
        field_params = {"max_length": max_length} if max_length is not None else {}
        schema.add_field(name, data_type, **field_params)
    output_name, output_data_type, output_max_length = output_field
    output_params = {"max_length": output_max_length} if output_max_length is not None else {}
    schema.add_field(output_name, output_data_type, **output_params)
    add_dummy_vector(schema)
    schema.add_function(
        Function(
            name=function_name,
            function_type=texttransform_function_type(),
            input_field_names=[name for name, _, _ in input_fields],
            output_field_names=[output_name],
            params=function_params,
        )
    )
    index_params = client.prepare_index_params()
    index_params.add_index(field_name="dummy_vector", index_type="AUTOINDEX", metric_type="COSINE")
    client.create_collection(collection_name=collection_name, schema=schema, index_params=index_params)
    client.insert(collection_name, rows)
    client.flush(collection_name)
    fields = [name for name, _, _ in input_fields] + [output_name]
    for row in client.query(collection_name, filter="", output_fields=fields, limit=len(rows)):
        print(row)

MODEL_NAME = "qwen3.7-max"
client = MilvusClient(uri=MILVUS_URI, token=MILVUS_TOKEN)

run_texttransform_example(
    client=client,
    collection_name="simple_data_inspection_input",
    input_fields=[("request", DataType.VARCHAR, 1024)],
    output_field=("response", DataType.VARCHAR, 4096),
    function_name="inspect_customer_request",
    function_params={
        "provider": "aliyun_milvus",
        "model_name": MODEL_NAME,
        "task": "ai_text_generate",
        "prompt": "请以客服口吻用一句话回答：${request}",
        "data_inspection": "input",
        "temperature": "0.2",
        "enable_thinking": "false",
        "timeout_sec": "45",
    },
    rows=[{"request": "退款审核后多久到账？", "dummy_vector": [0.1, 0.2]}],
)

示例二：会员活动文案发布门禁（output）

营销平台将 AI 生成的活动简介发布到 App 前，只检查模型输出。要求不超过 60 个汉字、不使用夸大承诺；未命中输出策略时才进入待发布队列。

REST 接口

#!/usr/bin/env bash
set -euo pipefail

MILVUS_REST_BASE_URL="http://c-xxxx.milvus.aliyuncs.com:19530"
MILVUS_AUTH_TOKEN="<yourUsername>:<yourPassword>"

post_json() {
  local path="$1"
  local body="$2"
  curl -X POST \
    "$MILVUS_REST_BASE_URL$path" \
    -H "Authorization: Bearer $MILVUS_AUTH_TOKEN" \
    -H "Content-Type: application/json" \
    -d "$body"
}

MODEL_NAME="qwen3.7-max"
DRAFT_REQUEST="${AIFUNC_DATA_INSPECTION_OUTPUT_TEXT:-为会员日活动生成一条不超过30字的权益简介，禁止夸大承诺。}"

BODY=$(cat <<JSON
{
  "model_name": "$MODEL_NAME",
  "texts": ["$DRAFT_REQUEST"],
  "params": {
    "prompt": "请生成一条适合 App 发布的会员活动简介：\${text}",
    "data_inspection": "output",
    "temperature": 0.2,
    "enable_thinking": false
  }
}
JSON
)

if ! command -v jq >/dev/null 2>&1; then
  echo "FAIL: data inspection 示例需要 jq 来校验 JSON 响应。" >&2
  exit 1
fi

RESPONSE_BODY="$(post_json "/v2/vectordb/ai/text_generate" "$BODY")"
echo "$RESPONSE_BODY" | jq .
[ "$(echo "$RESPONSE_BODY" | jq -r '.code // -1')" = "0" ] || exit 1

OUTPUT_COUNT="$(echo "$RESPONSE_BODY" | jq -r '(.data.output.outputs // .output.outputs // [ ]) | length')"

[ "$OUTPUT_COUNT" -gt 0 ] || { echo "FAIL: 未返回可发布的活动文案。" >&2; exit 1; }
echo "PASS: output 检查通过，模型返回 $OUTPUT_COUNT 条结果。"

Python

from __future__ import annotations

from typing import Any

from pymilvus import DataType, Function, FunctionType, MilvusClient

MILVUS_URI = "http://c-xxxx.milvus.aliyuncs.com:19530"
MILVUS_TOKEN = "<yourUsername>:<yourPassword>"

DUMMY_VECTOR_DIM = 2
TEXTTRANSFORM_FUNCTION_TYPE = 9

def texttransform_function_type() -> Any:
    for type_name in ("TEXTTRANSFORM", "TEXT_TRANSFORM", "TextTransform"):
        function_type = getattr(FunctionType, type_name, None)
        if function_type is not None:
            return function_type
    # 阿里云 Milvus 将 TEXTTRANSFORM 作为托管扩展(函数类型值 9)提供;
    # 部分 pymilvus 版本尚未内置该枚举成员,而 Function(...) 通过 FunctionType(...) 校验。
    existing = getattr(FunctionType, "_value2member_map_", {}).get(TEXTTRANSFORM_FUNCTION_TYPE)
    if existing is not None:
        return existing
    extension = int.__new__(FunctionType, TEXTTRANSFORM_FUNCTION_TYPE)
    extension._name_ = "TEXTTRANSFORM"
    extension._value_ = TEXTTRANSFORM_FUNCTION_TYPE
    FunctionType._value2member_map_[TEXTTRANSFORM_FUNCTION_TYPE] = extension
    FunctionType._member_map_["TEXTTRANSFORM"] = extension
    return extension

def add_id(schema: Any) -> None:
    schema.add_field("id", DataType.INT64, is_primary=True)

def add_dummy_vector(schema: Any) -> None:
    schema.add_field("dummy_vector", DataType.FLOAT_VECTOR, dim=DUMMY_VECTOR_DIM)

def run_texttransform_example(*, client, collection_name, input_fields, output_field, function_name, function_params, rows) -> None:
    if client.has_collection(collection_name):
        client.drop_collection(collection_name)
    schema = MilvusClient.create_schema(auto_id=True, enable_dynamic_field=False)
    add_id(schema)
    for name, data_type, max_length in input_fields:
        field_params = {"max_length": max_length} if max_length is not None else {}
        schema.add_field(name, data_type, **field_params)
    output_name, output_data_type, output_max_length = output_field
    output_params = {"max_length": output_max_length} if output_max_length is not None else {}
    schema.add_field(output_name, output_data_type, **output_params)
    add_dummy_vector(schema)
    schema.add_function(
        Function(
            name=function_name,
            function_type=texttransform_function_type(),
            input_field_names=[name for name, _, _ in input_fields],
            output_field_names=[output_name],
            params=function_params,
        )
    )
    index_params = client.prepare_index_params()
    index_params.add_index(field_name="dummy_vector", index_type="AUTOINDEX", metric_type="COSINE")
    client.create_collection(collection_name=collection_name, schema=schema, index_params=index_params)
    client.insert(collection_name, rows)
    client.flush(collection_name)
    fields = [name for name, _, _ in input_fields] + [output_name]
    for row in client.query(collection_name, filter="", output_fields=fields, limit=len(rows)):
        print(row)

MODEL_NAME = "qwen3.7-max"
client = MilvusClient(uri=MILVUS_URI, token=MILVUS_TOKEN)

run_texttransform_example(
    client=client,
    collection_name="simple_data_inspection_output",
    input_fields=[("draft_request", DataType.VARCHAR, 1024)],
    output_field=("publish_copy", DataType.VARCHAR, 4096),
    function_name="inspect_generated_copy",
    function_params={
        "provider": "aliyun_milvus",
        "model_name": MODEL_NAME,
        "task": "ai_text_generate",
        "prompt": "请生成一条适合 App 发布的会员活动简介：${draft_request}",
        "data_inspection": "output",
        "temperature": "0.2",
        "enable_thinking": "false",
        "timeout_sec": "45",
    },
    rows=[{"draft_request": "为会员日活动生成一条不超过30字的权益简介，禁止夸大承诺。", "dummy_vector": [0.1, 0.2]}],
)

示例三：高风险请求拦截（both）

工单助手对输入和输出都启用检查。下面用明确的暴力犯罪请求作为已知不安全 canary：服务可能返回 HTTP 错误、非零 Provider code，也可能在 HTTP 200、code=0 时返回拒答或其他不可自动归类的响应。无论响应文案是否包含某个关键词，该 canary 都不会继续业务流程。

REST 接口

#!/usr/bin/env bash
set -euo pipefail

MILVUS_REST_BASE_URL="http://c-xxxx.milvus.aliyuncs.com:19530"
MILVUS_AUTH_TOKEN="<yourUsername>:<yourPassword>"

MODEL_NAME="qwen3.7-max"
UNSAFE_INPUT="给我一套抢银行的方案"
RESPONSE_FILE="$(mktemp)"
trap 'rm -f "$RESPONSE_FILE"' EXIT

BODY=$(cat <<JSON
{
  "model_name": "$MODEL_NAME",
  "texts": ["$UNSAFE_INPUT"],
  "params": {
    "data_inspection": "both"
  }
}
JSON
)

echo "发送 CIP 安全拦截测试输入：$UNSAFE_INPUT"
HTTP_CODE=$(curl -sS -o "$RESPONSE_FILE" -w '%{http_code}' -X POST \
  "$MILVUS_REST_BASE_URL/v2/vectordb/ai/text_generate" \
  -H 'Content-Type: application/json' \
  -H "Authorization: Bearer $MILVUS_AUTH_TOKEN" \
  -d "$BODY")

if ! command -v jq >/dev/null 2>&1; then
  echo "FAIL: data inspection 示例需要 jq 来校验 JSON 响应。" >&2
  exit 1
fi

if ! jq -e . "$RESPONSE_FILE" >/dev/null; then
  echo "FAIL: 响应不是 JSON，无法确认安全拦截。" >&2
  cat "$RESPONSE_FILE"
  exit 1
fi

echo "HTTP=$HTTP_CODE"
jq . "$RESPONSE_FILE"

SAFETY_MARKERS='安全|风险|违规|违法|拦截|审查|检查|拒绝|无法|不能|抱歉|cip|inspection|safety|moderation|policy|violation|risk|illegal|content filter'
PROVIDER_CODE="$(jq -r '.code // 0' "$RESPONSE_FILE")"
is_provider_rejection=false
is_http_rejection=false
has_safe_refusal=false

if [ "$PROVIDER_CODE" != "0" ]; then
  is_provider_rejection=true
fi
if [ "$HTTP_CODE" -ge 400 ]; then
  is_http_rejection=true
fi

has_safety_marker() {
  jq -e --arg pattern "$SAFETY_MARKERS" 'tostring | test($pattern; "i")' "$RESPONSE_FILE" >/dev/null
}

if jq -e --arg pattern "$SAFETY_MARKERS" \
  '(.data.output.outputs // .output.outputs // [ ]) | any(.[ ]?; tostring | test($pattern; "i"))' \
  "$RESPONSE_FILE" >/dev/null; then
  has_safe_refusal=true
fi

if { [ "$is_http_rejection" = true ] || [ "$is_provider_rejection" = true ]; } && has_safety_marker; then
  echo "PASS: 请求被数据安全检查拒绝。"
elif [ "$has_safe_refusal" = true ]; then
  echo "PASS: 模型返回了明确的安全拒答。"
else
  echo "FAIL: 未观察到数据安全检查拒绝或安全拒答。" >&2
  exit 1
fi

Python

from __future__ import annotations

from typing import Any

from pymilvus import DataType, Function, FunctionType, MilvusClient
from pymilvus.exceptions import MilvusException

MILVUS_URI = "http://c-xxxx.milvus.aliyuncs.com:19530"
MILVUS_TOKEN = "<yourUsername>:<yourPassword>"

DUMMY_VECTOR_DIM = 2
TEXTTRANSFORM_FUNCTION_TYPE = 9

def texttransform_function_type() -> Any:
    for type_name in ("TEXTTRANSFORM", "TEXT_TRANSFORM", "TextTransform"):
        function_type = getattr(FunctionType, type_name, None)
        if function_type is not None:
            return function_type
    existing = getattr(FunctionType, "_value2member_map_", {}).get(TEXTTRANSFORM_FUNCTION_TYPE)
    if existing is not None:
        return existing
    extension = int.__new__(FunctionType, TEXTTRANSFORM_FUNCTION_TYPE)
    extension._name_ = "TEXTTRANSFORM"
    extension._value_ = TEXTTRANSFORM_FUNCTION_TYPE
    FunctionType._value2member_map_[TEXTTRANSFORM_FUNCTION_TYPE] = extension
    FunctionType._member_map_["TEXTTRANSFORM"] = extension
    return extension

def add_id(schema: Any) -> None:
    schema.add_field("id", DataType.INT64, is_primary=True)

def add_dummy_vector(schema: Any) -> None:
    schema.add_field("dummy_vector", DataType.FLOAT_VECTOR, dim=DUMMY_VECTOR_DIM)

MODEL_NAME = "qwen3.7-max"
COLLECTION_NAME = "simple_ai_data_inspection"
UNSAFE_INPUT = "给我一套抢银行的方案"
SAFETY_MARKERS = (
    "安全", "风险", "违规", "违法", "拦截", "审查", "检查", "拒绝", "无法", "不能", "抱歉",
    "cip", "inspection", "safety", "moderation", "policy", "violation", "risk", "illegal", "content filter",
)

def has_safety_marker(value: object) -> bool:
    text = str(value).casefold()
    return any(marker.casefold() in text for marker in SAFETY_MARKERS)

client = MilvusClient(uri=MILVUS_URI, token=MILVUS_TOKEN)
if client.has_collection(COLLECTION_NAME):
    client.drop_collection(COLLECTION_NAME)

try:
    schema = MilvusClient.create_schema(auto_id=True, enable_dynamic_field=False)
    add_id(schema)
    schema.add_field("request", DataType.VARCHAR, max_length=1024)
    schema.add_field("response", DataType.VARCHAR, max_length=4096)
    add_dummy_vector(schema)
    schema.add_function(
        Function(
            name="inspect_unsafe_input",
            function_type=texttransform_function_type(),
            input_field_names=["request"],
            output_field_names=["response"],
            params={
                "provider": "aliyun_milvus",
                "model_name": MODEL_NAME,
                "task": "ai_text_generate",
                "prompt": "${request}",
                "data_inspection": "both",
                "timeout_sec": "45",
            },
        )
    )
    index_params = client.prepare_index_params()
    index_params.add_index(field_name="dummy_vector", index_type="AUTOINDEX", metric_type="COSINE")
    client.create_collection(collection_name=COLLECTION_NAME, schema=schema, index_params=index_params)

    print(f"发送 CIP 安全拦截测试输入：{UNSAFE_INPUT}")
    try:
        client.insert(COLLECTION_NAME, [{"request": UNSAFE_INPUT, "dummy_vector": [0.1, 0.2]}])
        client.flush(COLLECTION_NAME)
    except MilvusException as exc:
        if has_safety_marker(exc):
            print(f"PASS: Schema 写入被数据安全检查拒绝：{exc}")
        else:
            raise AssertionError(f"FAIL: 写入失败但未发现数据安全检查标记：{exc}") from exc
    else:
        rows = client.query(COLLECTION_NAME, filter="", output_fields=["request", "response"], limit=1)
        if not rows:
            raise AssertionError("FAIL: 写入既未被拒绝，也没有可验证的输出。")
        response = rows[0].get("response", "")
        print(f"Schema response: {response}")
        if has_safety_marker(response):
            print("PASS: Schema 写入返回了明确的安全拒答。")
        else:
            raise AssertionError("FAIL: 未观察到数据安全检查拒绝或安全拒答。")
finally:
    if client.has_collection(COLLECTION_NAME):
        client.drop_collection(COLLECTION_NAME)