跳转至

G-GCC-P-016 Data Confidentiality Policy (Kebijakan Kerahasiaan Data)

自动提取自PDF

Page 1

G-GCC-P-016 DATA CONFIDENTIALITY POLICY (KEBIJAKAN KERAHASIAAN DATA)

POLICY & STANDARD PROCEDURE 2025

Page 3

Policy No. G-GCC-P-016 DATA CONFIDENTIALITY POLICY (KERAHASIAAN DATA) Group Controller GC Date Issued 20 October 2025 Effective Date 1 January 2026 Classification GCC Revision No. N/A Page 3 of 16 TABLE OF CONTENTS

PURPOSE ................................................................................................................................................. 4 SCOPE ...................................................................................................................................................... 4 DEFINITION .............................................................................................................................................. 5 GUIDELINES ............................................................................................................................................. 7 APPENDIX I ............................................................................................................................................ 11 APPENDIX II ........................................................................................................................................... 13 APPENDIX III .......................................................................................................................................... 15 APPENDIX IV .......................................................................................................................................... 16

Page 4

Policy No. G-GCC-P-016 DATA CONFIDENTIALITY POLICY (KERAHASIAAN DATA) Group Controller GC Date Issued 20 October 2025 Effective Date 1 January 2026 Classification GCC Revision No. N/A Page 4 of 16 PURPOSE

TUJUAN

This document provides governance on data confidentiality to ensure data in an organization are distributed properly and protected from theft, loss, or unauthorized disclosure within Golden Agri- Resources Ltd and its subsidiaries (Group).

Dokumen ini memberikan pedoman atas kerahasiaan data untuk memastikan data di dalam organisasi didistribusikan secara tepat dan dilindungi dari pencurian, kehilangan, atau pengungkapan yang tidak sah di Golden Agri- Resources Ltd dan anak perusahaan (Grup).

SCOPE

RUANG LINGKUP

The policy applies to all business units and corporate functions to assess data confidentiality and implement controls on electronic (softcopy) and printed (hardcopy) data.

Kebijakan ini berlaku pada semua unit bisnis dan corporate functions untuk menilai kerahasiaan data dan mengimplementasikan kontrol pada data elektronik (softcopy) dan cetak (hardcopy).

This policy is effective from 1st January 2026. All prior arrangements and matters contradictory to this policy, will cease to be in effect.

Kebijakan ini berlaku sejak tanggal 1 Januari 2026. Segala ketentuan atau hal-hal yang bertentangan dengan kebijakan ini dinyatakan tidak berlaku lagi sejak kebijakan ini diberlakukan.

Page 5

Policy No. G-GCC-P-016 DATA CONFIDENTIALITY POLICY (KERAHASIAAN DATA) Group Controller GC Date Issued 20 October 2025 Effective Date 1 January 2026 Classification GCC Revision No. N/A Page 5 of 16 DEFINITION

DEFINISI

  1. Data is Group information in digital or physical formats, that is collected, processed, analysed, generated, stored, and distributed, which can be obtained from external sources or generated internally.

  2. Data adalah informasi Grup dalam format digital atau fisik yang dikumpulkan, diproses, dianalisa, dihasilkan, disimpan dan didistribusikan, yang berasal dari sumber eksternal atau dihasilkan secara internal.

  3. Data confidentiality is the framework of distributing and protecting data from unauthorized access, disclosure, loss or theft.

  4. Kerahasiaan data adalah kerangka dari pendistribusian dan perlindungan data dari akses yang tidak sah, pengungkapan, kehilangan dan pencurian.

  5. Data owner is the Head of Business or Function Head of the Group (at the Country Level) who is accountable for the classification, protection, use, and quality of data.

i. Primary data owner are data owners who are the main custodian of data.

ii. Data owner delegates are subordinates of data owner (restricted to 2 levels below) tasked for the management of data confidentiality.

  1. Data owner adalah Head of Business atau Function Head Grup (per Negara terkait) yang bertanggung jawab atas klasifikasi, proteksi, penggunaan dan kualitas dari data.

i. Primary data owner adalah data owner yang merupakan kustodian utama dari data. ii. Data owner delegates adalah bawahan data owner (terbatas sampai dengan 2 tingkat jabatan dibawahnya) yang ditugaskan untuk pengelolaan kerahasiaan data.

  1. Data access controller are designated representatives from IT who:
    a. govern shared folders or sharepoint, and

b. manage user access at enterprise level.

  1. Data access controller adalah perwakilan dari IT yang ditunjuk untuk:
    a. mengatur shared folders atau sharepoint, dan
    b. mengelola akses user dalam tingkat enterprise.

  2. Data administrator are appointed personnel from business unit, corporate functions or IT who manages user access on behalf of data owner.

  3. Data administrator adalah personel dari unit bisnis, corporate functions atau IT yang ditunjuk untuk mewakili data owner untuk mengelola akses user.

  4. Company’s platform or network is the company’s owned network and data center network (e.g. Shared folder, Sharepoint, SmartDrive, etc).

  5. Platform atau jaringan perusahaan adalah jaringan milik perusahaan dan jaringan data center (contohnya Shared folder, Sharepoint, Smartdrive, dll).

Page 6

Policy No. G-GCC-P-016 DATA CONFIDENTIALITY POLICY (KERAHASIAAN DATA) Group Controller GC Date Issued 20 October 2025 Effective Date 1 January 2026 Classification GCC Revision No. N/A Page 6 of 16 7. Shared folders or Sharepoint are directories which enables individuals and teams to store, manage and share files collaboratively.

  1. Shared folders atau Sharepoint adalah direktori yang memungkinkan individu dan tim untuk menyimpan, mengelola dan mendistribusikan file secara kolaboratif.

  2. Main folder or main sites are directories belonging to the Data owner.

  3. Folder utama atau sites utama adalah direktori yang dimiliki Data owner.

  4. Sub-folder or sub-sites are directories residing in the main folder or main sites.

  5. Sub-folder atau sub-sites adalah direktori yang berada di dalam folder utama atau sites utama.

  6. Data list is a comprehensive list of data belonging to the data owner, consisting of various data types.

  7. Daftar data adalah daftar data yang lengkap yang dimiliki oleh data owner, terdiri dari berbagai tipe data.

  8. Confidentiality category is a measurement of different levels of sensitivity and privacy of data.

i. Internal is the lowest level of data confidentiality category.

ii. Confidential is the medium level of data confidentiality category.

iii. Strictly confidential is the highest level of data confidentiality category.

  1. Kategori kerahasiaan adalah pengukuran dari berbagai tingkat sensitivitas dan kerahasiaan data.

i. Internal adalah tingkat terendah dari kategori kerahasiaan data.

ii. Rahasia adalah tingkat menengah dari kategori kerahasiaan data.

iii. Sangat rahasia adalah tingkat tertinggi dari kategori kerahasiaan data.

  1. Controls are measures implemented to manage unauthorized data disclosure risks and safeguard data owned by the Company.

  2. Kontrol adalah tindakan yang di implementasi untuk mengelola risiko pengungkapan data yang tidak sah dan pengamanan pada data.

Page 7

Policy No. G-GCC-P-016 DATA CONFIDENTIALITY POLICY (KERAHASIAAN DATA) Group Controller GC Date Issued 20 October 2025 Effective Date 1 January 2026 Classification GCC Revision No. N/A Page 7 of 16 GUIDELINES KEBIJAKAN

  1. At enterprise level, a main folder or main sites for each data owner must be created and reside in the company’s platform or network.

  2. Dalam tingkat enterprise, folder utama atau sites utama untuk setiap data owner harus dibuat dan berada di platform atau jaringan perusahaan.

  3. All sub-folders and sub-sites should be created within the data owner’s main folder or main sites to ensure clear and complete visibility of all data belonging to data owner.

  4. Semua sub-folder dan sub-sites harus dibuat di dalam folder utama atau sites utama milik data owner untuk memastikan visibilitas yang jelas dan lengkap pada data yang dimiliki oleh data owner.

  5. Data access controller is responsible technically at enterprise level to:
    a. govern creation of main folders and main sites of shared folders or sharepoint, respectively. b. grant user access to main folders and main sites based on approval from data owner. c. monitor user access periodically by providing reports to data owner or data administrator.

  6. Data access controller bertanggung jawab secara teknis dalam tingkat enterprise untuk: a. mengatur pembuatan folder utama dan sites utama dari masing-masing shared folder atau sharepoint. b. memberikan akses user untuk folder utama dan sites utama berdasarkan persetujuan dari data owner. c. mengawasi akses user secara berkala dengan memberikan laporan ke data owner atau data administrator.

  7. Data owner is responsible to: a. prepare, maintain and ensure completeness of data list, b. assess criteria for each data types, c. assign each data type to respective confidentiality category
    d. implement controls according to Appendix I,

e. manage the structure of their shared folder or sharepoint based on their confidentiality level, and f. conduct regular assessment of confidentiality categorization

  1. Data owner bertanggung jawab untuk: a. menyiapkan, memelihara dan memastikan kelengkapan daftar data, b. menilai kriteria untuk setiap tipe data, c. menetapkan setiap tipe data ke kategori kerahasiaan masing-masing d. mengimplementasikan kontrol yang sesuai seperti di Lampiran I, e. mengelola struktur dari shared folder atau sharepoint berdasarkan tingkat kerahasiaan, dan f. melakukan asesmen rutin terhadap kategori kerahasiaan.
  2. Data owner may assign Data owner delegates to govern and manage data under their jurisdiction.
  3. Data owner dapat menunjuk Data owner delegates untuk mengatur dan mengelola data dibawah kewenangan mereka.

Page 8

Policy No. G-GCC-P-016 DATA CONFIDENTIALITY POLICY (KERAHASIAAN DATA) Group Controller GC Date Issued 20 October 2025 Effective Date 1 January 2026 Classification GCC Revision No. N/A Page 8 of 16 6. Data owner or Data owner delegates are reponsible to assess nature of each data types to the following criteria’s:

  1. Data owner atau data owner delegates bertanggung jawab untuk menilai karakteristik dari setiap tipe data berdasarkan kriteria berikut:

Criteria Confidentiality Categories Risk of disclosure & impact of breach to financial, operational or reputational to the Group Data user Minor impact Internal usage for all employees Internal Moderate impact Restricted to specific roles or departments (i.e. specific employees, divisions, departments) Confidential Severe impact Highly restricted to a “need-to- know” basis Strictly Confidential

Kriteria Kategori
Kerahasiaan Resiko pengungkapan atau dampak pelanggaran kepada finansial, operasional atau reputasi Grup Pengguna data Dampak kecil Pengunaan internal untuk semua karyawan Internal Dampak sedang Terbatas untuk peran atau departemen tertentu (yaitu personel tertentu, divisi, department) Rahasia Dampak parah Sangat terbatas untuk pihak yang perlu mengetahui Sangat Rahasia

  1. In cases where two criteria assessments above results in different confidentiality categories, the higher confidentiality level should be applied.

  2. Dalam kasus dimana penilaian dua kriteria di atas menghasilkan kategori kerahasiaan yang berbeda, tingkat kerahasiaan yang diaplikasikan adalah tingkat yang lebih tinggi.

  3. Data administrator to manage user access to data owner’s sub-folders or sub-sites, including aligning user access with Data access controller.

  4. Data administrator mengelola akses user untuk sub-folder atau sub-sites milik data owner, termasuk penyelarasan akses user dengan Data access controller.

Page 9

Policy No. G-GCC-P-016 DATA CONFIDENTIALITY POLICY (KERAHASIAAN DATA) Group Controller GC Date Issued 20 October 2025 Effective Date 1 January 2026 Classification GCC Revision No. N/A Page 9 of 16 9. Controls are required measures to safeguard and mitigate risks of unauthorized access, unauthorized disclosure, loss or theft. Guidance on controls for each confidentiality categories are tabled in Appendix I.

  1. Kontrol adalah tindakan yang diperlukan untuk mengamankan dan memitigasi risiko akses yang tidak sah, pengungkapan yang tidak sah, kehilangan dan pencurian. Pedoman kontrol untuk masing-masing kategori kerahasiaan dilampirkan pada Lampiran I.

  2. For data distribution to external parties, approvals from Primary Data Owner must be obtained using the Form for external distribution to ensure distributed data is properly authorized and documented. Refer to Appendix II for approval matrix and Appendix III for the form.

  3. Untuk distribusi data ke pihak eksternal, persetujuan dari Primary data owner harus diperoleh menggunakan Formulir untuk distribusi eksternal untuk memastikan data yang didistribusikan sudah diotorisasi dan terdokumentasi dengan benar. Dapat merujuk pada Lampiran II untuk matriks persetujuan dan Lampiran III untuk formulir.

  4. Approval from Primary data owner must be obtained prior to distribution or publication to external parties.

  5. Persetujuan dari primary data owner harus diperoleh sebelum didistribusikan atau dipublikasikan kepada pihak eksternal.

  6. Distributing data to external parties is only permitted using the company’s approved platform (i.e. SmartDrive). External platforms (e.g. Dropbox, Google Drive, etc) are not allowed, except for data transfer to government institutions, external customers or professional agencies which requires approval from personnels level 24 and above.

  7. Pendistribusian data ke pihak eksternal hanya diperbolehkan menggunakan platform perusahaan yang telah disetujui (yaitu Smartdrive). Penggunaan platform eksternal (contohnya Dropbox, Google Drive, dll) tidak diperbolehkan, kecuali transfer data ke institusi pemerintah, pelanggan eksternal atau agensi profesional, yang harus disetujui oleh personel level 24 dan keatas.

  8. Distributing data to authorized external party (e.g. consultants) must be accompanied with Non-disclosure Agreement (NDA) and requires approval from data owner.

  9. Pendistribusian data ke pihak eksternal yang berwenang (contoh: konsultan) harus disertai dengan Perjanjian Kerahasiaan dan membutuhkan persetujuan dari data owner.

  10. For data distribution within the Group, approvals must be obtained based on approval matrix in Appendix IV. However, if distribution is eventually intended for external-parties, refer to point 10 to 12 above.

  11. Untuk distribusi data di dalam Grup, persetujuan harus diperoleh berdasarkan matriks persetujuan di Lampiran IV. Namun, jika distribusi pada akhirnya ditujukan untuk pihak eksternal, maka merujuk pada poin 10 sampai 12 diatas.

  12. Blanket approval may be obtained for data which are regularly distributed to external parties and within the Group.

  13. Blanket approval bisa didapatkan untuk data yang secara berkala didistribusikan kepada pihak eksternal atau di dalam Grup.

Page 10

Policy No. G-GCC-P-016 DATA CONFIDENTIALITY POLICY (KERAHASIAAN DATA) Group Controller GC Date Issued 20 October 2025 Effective Date 1 January 2026 Classification GCC Revision No. N/A Page 10 of 16 16. Meetings relating to Confidential and Strictly Confidential data cannot be recorded or automatically transcribed in any forms (e.g. AI Notetaking). 16. Rapat terkait data Rahasia dan Sangat Rahasia tidak boleh direkam maupun ditranskripsi secara otomatis dalam bentuk apapun (contohnya AI Notetaking).

  1. Temporary storing data on local storage of company’s owned devices caused by inabilitiy to access company’s network (e.g. business trip, working from home, etc) is allowed. However, latest version of each data shall be updated to the company’s network at the earliest possible.

  2. Menyimpan data sementara di penyimpanan lokal perangkat milik perusahaan yang disebabkan oleh ketidakmampuan untuk mengakses jaringan milik perusahaan (contohnya dinas, kerja dari rumah, dll) diperbolehkan. Namun, versi terbaru dari setiap data harus diperbarui ke jaringan milik perusahaan secepat mungkin.

  3. The Group reserves the right to take appropriate disciplinary action up to and including termination for non-compliance with this policy, as stipulated in the Company Regulations.

  4. Grup berhak mengambil tindakan disipliner sampai dengan dan termasuk penghentian hubungan kerja atas ketidakpatuhan terhadap kebijakan ini, sesuai dengan ketentuan dalam peraturan perusahaan.

Page 11

Policy No. G-GCC-P-016 DATA CONFIDENTIALITY POLICY (KERAHASIAAN DATA) Group Controller GC Date Issued 20 October 2025 Effective Date 1 January 2026 Classification GCC Revision No. N/A Page 11 of 16 APPENDIX I Controls

LAMPIRAN I Kontrol

Internal Confidential Strictly Confidential Meeting Discussion Conducted with authorized personnel only Conducted inside a secured working area with limited access and attended by authorized personnel only Conducted inside a secured room with limited access in a small group Meeting can be recorded Meeting must not be recorded or automatically transcribed in any forms (e.g. AI Notetaking). Storage Softcopy must be stored in company's platform or network and comply with applicable company regulations and policies Softcopy must be stored in company's platform or network with limited access and comply with applicable company regulations and policies Hardcopy must be kept in company's authorized premises without public access Hardcopy must be stored within a secured working area Hardcopy must be stored in a locked cabinet within a secured working area Distribution (format) Distribution of softcopy does not require password protection Softcopy must only be shared using company approved platforms (i.e. E-mail, SmartDrive), must be password protected and the password must be sent separately (for distribution to external parties) Hardcopy may be shared only in a closed envelope and accompanied with log book register Hardcopy may be transferred only in a sealed envelope and accompanied with log book register. Distribution (recipients) Distributing data to external parties requires approvals from Primary Data Owner using the Form for External Distribution. For approval matrix, refer to Appendix II and for the form, refer to Appendix III.
Blanket approval may be obtained for regular activities Distributing data within the Group requires approvals based on approval matrix in Appendix IV. Blanket approval may be obtained for regular activities. If distribution is eventually intended for external parties, refer to the guidelines for distribution to external parties. Distributing data to authorized external party (e.g. consultants, business partners) must be accompanied with Non-disclosure Agreement (NDA) and requires approval from data owner Sss

Page 12

Policy No. G-GCC-P-016 DATA CONFIDENTIALITY POLICY (KERAHASIAAN DATA) Group Controller GC Date Issued 20 October 2025 Effective Date 1 January 2026 Classification GCC Revision No. N/A Page 12 of 16

Internal Rahasia Sangat Rahasia Diskusi rapat Dilaksanakan dengan personel berwenang saja Dilaksanakan di area kerja dengan akses terbatas dan hanya dihadiri oleh personel yang berwenang
Dilaksanakan di ruang yang aman dengan akses terbatas dalam kelompok kecil Rapat boleh di rekam Rapat tidak boleh direkam maupun ditranskripsi secara otomatis dalam bentuk apapun (contoh: AI Notetaking) Penyimpanan Softcopy harus disimpan di platform atau jaringan perusahaan dan mematuhi peraturan serta kebijakan perusahaan yang berlaku. Softcopy harus disimpan di platform atau jaringan perusahaan dengan akses terbatas dan mematuhi peraturan serta kebijakan perusahaan yang berlaku. Hardcopy harus disimpan di lokasi perusahaan tanpa akses umum. Hardcopy harus disimpan di area kerja yang aman Hardcopy harus disimpan di dalam lemari terkunci di area kerja yang aman Distribusi (format) Distribusi softcopy tidak memerlukan perlindungan kata sandi Softcopy hanya boleh didistribusikan melalui platform yang disetujui perusahaan (misalnya E-mail, SmartDrive), harus dilindungi dengan kata sandi, dan kata sandi tersebut harus dikirim secara terpisah (untuk distribusi kepada pihak eksternal). Hardcopy hanya boleh di distribusikan dalam amplop tertutup dan disertai dengan buku log
Hardcopy hanya boleh didistribusikan dalam amplop tersegel dan disertai dengan buku log. Distribusi (penerima) Distribusi data ke pihak eksternal membutuhkan persetujuan dari Primary Data Owner menggunakan Formulir untuk distribusi eksternal. Untuk matriks persetujuan, merujuk pada Lampiran II dan untuk formulir, merujuk pada Lampiran III. Blanket approval bisa didapatkan untuk kegiatan teratur. Distribusi data di dalam Grup memerlukan persetujuan berdasarkan matriks persetujuan di Lampiran IV. Blanket approval bisa didapatkan untuk kegiatan teratur. Jika distribusi pada akhirnya ditujukan untuk pihak eksternal, maka merujuk pada kebijakan untuk distribusi ke pihak eksternal. Pendistribusian data ke pihak eksternal yang berwenang (contoh: konsultan, mitra bisnis) harus disertai dengan Perjanjian Kerahasiaan dan membutuhkan persetujuan dari data owner.

Page 13

Policy No. G-GCC-P-016 DATA CONFIDENTIALITY POLICY (KERAHASIAAN DATA) Group Controller GC Date Issued 20 October 2025 Effective Date 1 January 2026 Classification GCC Revision No. N/A Page 13 of 16 APPENDIX II

Approval Matrix for distribution to external parties

LAMPIRAN II Matriks persetujuan untuk distribusi ke pihak eksternal Corporate Internal Confidential Strictly Confidential Approver 1 Related Corp Division Head Approver 2 - Related Director Approver 3 - - Head of GCC / GCFO / Deputy GCFO

Upstream Internal Confidential Strictly Confidential Approver 1 PSM CFO / PSM CEO Approver 2 - US CFO / MDO / MD Services Approver 3 - - HoU

Carbon & Renewables Internal Confidential Strictly Confidential Approver 1 C&R CFO / C&R CEO Approver 2 - Head of C&R Approver 3 - - GAR COO

Downstream Indonesia Internal Confidential Strictly Confidential Approver 1 DSI GM (Financial / Operational / etc) DSI CFO / DSI CEO / Commercial DS Indo Director / DSI Head of Support and Services Approver 2 - DSI CFO / DSI CEO / Commercial DS Indo Director / DSI Head of Support and Services DSI MD Approver 3 - - DS CFO / GAR COO

Oleochemical (Oleo) Internal Confidential Strictly Confidential Approver 1 Oleo CFO Approver 2 - Oleo CEO Approver 3 - - DS CFO / GAR COO

Sinarmas Consumer Products (SCP) Internal Confidential Strictly Confidential Approver 1 SCP CFO Approver 2 - SCP CEO Approver 3 - - DS CFO / GAR COO

Page 14

Policy No. G-GCC-P-016 DATA CONFIDENTIALITY POLICY (KERAHASIAAN DATA) Group Controller GC Date Issued 20 October 2025 Effective Date 1 January 2026 Classification GCC Revision No. N/A Page 14 of 16 China Food & Agri Internal Confidential Strictly Confidential Approver 1 Authorized delegate of the Department Head Approver 2 - Department Head Approver 3 - - GAR China CEO

Downstream Singapore Internal Confidential Strictly Confidential Approver 1 Head of Department Approver 2 - - DS CFO / Head of DS / DS COO

Downstream Destination Offices Internal Confidential Strictly Confidential Approver 1 Head of Department Approver 2 - Destination Office Lead (Finance/ Commercial/, Operations/ etc) * Approver 3 - - DS CFO / Head of DS / DS COO *Please refer to Downstream Business Control for detailed approval matrix.

Page 15

Policy No. G-GCC-P-016 DATA CONFIDENTIALITY POLICY (KERAHASIAAN DATA) Group Controller GC Date Issued 20 October 2025 Effective Date 1 January 2026 Classification GCC Revision No. N/A Page 15 of 16 APPENDIX III Form for external distribution

LAMPIRAN III Formulir untuk distribusi ke pihak eksternal

Date : Requestor’s Name : Requestor’s Title : Division : Department : Requestor Business Unit : UPSTREAM DOWNSTREAM CARBON & RENEWABLES (please tick the box) CORPORATE Data Type : Details of Data : Confidentiality : Primary Data Owner : Recipient : Purpose : (please specify in details) Non-Disclosure Agreement: (Please tick the box and attach your Non-Disclosure Agreement (NDA), if applicable) Name : Title : Name : Name : Name : Title : Title : Title : DATA CONFIDENTIALITY Approval 1 Approval 2 Approval 3 Requestor FORM FOR EXTERNAL DISTRIBUTION

Page 16

Policy No. G-GCC-P-016 DATA CONFIDENTIALITY POLICY (KERAHASIAAN DATA) Group Controller GC Date Issued 20 October 2025 Effective Date 1 January 2026 Classification GCC Revision No. N/A Page 16 of 16 APPENDIX IV Approval Matrix for distribution within the Group LAMPIRAN IV Matriks persetujuan untuk distribusi di dalam Grup

Approver Internal Confidential Strictly Confidential Corporate

Approval is not applicable for distribution of data within the Group Related Corporate Division Head Upstream PSM CFO / PSM CEO Downstream Indonesia DSI CFO / DSI CEO / Commercial DS Indo Director / DSI Head of Support and Services Carbon & Renewables C&R CFO / C&R CEO Oleo Oleo CFO / Oleo CEO SCP SCP CFO / SCP CEO China Food & Agri Authorized delegate of the Department Head Downstream Singapore & Destination Offices Head of Department

🔗 关联笔记

笔记 说明
EDM MDG 主数据治理 数据保密政策与 MDG 数据治理直接衔接
三域关联矩阵 流程5+8：✅ 三域一致