Translate lab documentation to English
Some checks failed
Repo Quality / structure (push) Has been cancelled
Terraform Validate / validate (push) Has been cancelled

This commit is contained in:
Rodrigo Pace
2026-05-08 14:50:52 -03:00
parent cde150b705
commit 52bf971b8b
33 changed files with 939 additions and 702 deletions

View File

@@ -1,59 +1,59 @@
# 05 - Legacy App AI Extension
## Objetivo
## Objective
Demonstrar como uma aplicacao legada pode ser ampliada com um agente AI sem reescrever toda a autorizacao da aplicacao.
Show how a legacy application can be extended with an AI agent without rewriting all application authorization logic.
## O Que Este Lab Mostra
## What This Lab Shows
Antes do Oracle Deep Data Security, um agente AI conectado ao mesmo schema do legado pode consultar clientes, margem, contratos, clausulas legais e tickets privados. Depois dos data grants, o agente recebe apenas os dados permitidos para a persona propagada.
Before Oracle Deep Data Security, an AI agent connected to the same legacy schema can query customers, margin, contracts, legal clauses, and private support tickets. After data grants are applied, the agent receives only the data allowed for the propagated persona.
## Personas
- `joao`: vendedor regional.
- `ana`: gerente comercial Brasil.
- `maria`: atendimento ao cliente.
- `sofia`: juridico.
- `legacy_app`: conta tecnica da aplicacao existente.
- `ai_agent_app`: conta tecnica do novo agente AI.
- `joao`: regional sales representative.
- `ana`: Brazil sales manager.
- `maria`: customer support.
- `sofia`: legal user.
- `legacy_app`: technical account for the existing application.
- `ai_agent_app`: technical account for the new AI agent.
## Onde Executar Os Comandos
## Where To Run The Commands
Execute os comandos a partir da raiz do repositorio:
Run commands from the repository root:
```powershell
cd C:\Users\rodrigo\Documents\Codex\oracle-deep-data-security-lab
```
Conecte no banco com SQLcl ou SQL*Plus:
Connect to the database with SQLcl or SQL*Plus:
```bash
sql "<connect_string>"
```
Exemplo:
Example:
```text
ADMIN/<senha>@ddslab_high
ADMIN/<password>@ddslab_high
```
Se estiver usando Autonomous Database com wallet, configure `TNS_ADMIN` apontando para o diretorio da wallet antes de conectar.
If you use Autonomous Database with a wallet, configure `TNS_ADMIN` to point to the wallet directory before connecting.
## Passo A Passo - Antes, Ambiente Vulneravel
## Step By Step - Before, Vulnerable Environment
1. Acesse o banco:
1. Connect to the database:
```bash
sql "<connect_string>"
```
2. Limpe qualquer execucao anterior:
2. Clean up any previous run:
```sql
@scenarios/05-legacy-app-ai-extension/sql/99_reset.sql
```
3. Crie o dataset legado, contratos, tickets e personas:
3. Create the legacy dataset, contracts, tickets, and personas:
```sql
@scenarios/05-legacy-app-ai-extension/sql/00_schema.sql
@@ -61,45 +61,45 @@ Se estiver usando Autonomous Database com wallet, configure `TNS_ADMIN` apontand
@scenarios/05-legacy-app-ai-extension/sql/02_identities.sql
```
4. Simule a pergunta do agente AI:
4. Simulate the AI agent question:
```text
Liste todos os clientes de alto risco, margem, renovacoes, clausulas legais e notas privadas de atendimento.
List all high-risk customers, margin, renewals, legal clauses, and private support notes.
```
5. Execute as queries amplas que representam a resposta do agente:
5. Run the broad queries that represent the agent response:
```sql
@scenarios/05-legacy-app-ai-extension/sql/04_test_queries.sql
```
Resultado esperado antes: o agente consegue juntar dados comerciais, juridicos e de atendimento alem do necessario.
Expected result before protection: the agent can combine commercial, legal, and support data beyond what is needed.
## Passo A Passo - Depois, Com Deep Data Security
## Step By Step - After, With Deep Data Security
1. Aplique os data grants:
1. Apply the data grants:
```sql
@scenarios/05-legacy-app-ai-extension/sql/03_data_grants.sql
```
2. Execute novamente as mesmas queries:
2. Run the same queries again:
```sql
@scenarios/05-legacy-app-ai-extension/sql/04_test_queries.sql
```
3. Repita a demonstracao simulando as personas `joao`, `ana`, `maria` e `sofia`.
3. Repeat the demo by simulating the `joao`, `ana`, `maria`, and `sofia` personas.
Resultado esperado depois:
Expected result after protection:
- `joao` ve sua carteira sem margem nem legal hold.
- `ana` ve clientes Brasil e metricas comerciais regionais.
- `maria` ve tickets operacionais, sem clausulas juridicas ou notas privadas.
- `sofia` ve contratos e clausulas juridicas autorizadas.
- A modernizacao com AI acontece sem expor o schema inteiro.
- `joao` sees his portfolio without margin or legal hold.
- `ana` sees Brazil customers and regional commercial metrics.
- `maria` sees operational tickets without legal clauses or private notes.
- `sofia` sees authorized contracts and legal clauses.
- AI modernization is possible without exposing the whole schema.
## Execucao Automatizada Opcional
## Optional Automated Execution
Windows:
@@ -113,7 +113,7 @@ Linux/macOS:
./scripts/run-scenario.sh 05-legacy-app-ai-extension "<connect_string>"
```
## Detalhes Da Demo
## Demo Details
Veja o passo a passo completo, evidencias e referencias oficiais em [RUNBOOK.md](RUNBOOK.md).
See the complete walkthrough, evidence, and official references in [RUNBOOK.md](RUNBOOK.md).