授权账户Authorize account
客户在 TikTok 官方页面选择账户和权限，回调只接收授权码。The customer selects accounts and permissions on TikTok's official authorization page.
可信广告自动化TRUSTED AD AUTOMATION
让 GMV Max 规则可控、可审计Controlled, auditable GMV Max operations
通过明确授权、加密凭据、审批闸门和完整审计记录执行广告规则。Rule-based GMV Max operations with explicit OAuth, encrypted credentials, approval gates and complete audit history.
官方 API 集成状态Official API integration status应用已获批准；每个账户仍须单独完成 OAuthApp approved; each account still requires explicit OAuth
应用已批准 · 待账户授权APPROVED · OAUTH REQUIRED
明确 OAuth 授权Explicit OAuth consent不要求或存储客户的 TikTok 密码。We never request or store a customer's TikTok password.
服务端加密Server-side encryption应用密钥和令牌不暴露给浏览器插件。App secrets and tokens are never exposed to browser extensions.
写入默认关闭Writes disabled by default先预演、再确认、后执行。Preview first, approve second, execute last.
可撤销、可删除Revocable and deletable用户可以断开授权并申请删除数据。Users can revoke access and request data deletion.
每次动作都有证据链Every action has an evidence trail
系统把授权、读取、规则判断、人工确认和执行结果分开记录，便于复核与追责。Authorization, data reads, rule decisions, human approval and execution results are recorded separately for review.
同步所需数据Sync required data
按最小权限读取广告账户、GMV Max 计划和表现指标。Read only the advertiser, GMV Max campaign and performance data required by the product.
预演规则Preview rules
展示触发条件、原值、建议值和安全限制，不在后台静默改动。Show conditions, previous values, proposed values and safety limits before any change.
记录执行Record execution
保存操作人、对象、时间、前后值和平台响应，支持问题追溯。Store actor, target, timestamp, before and after values, and the platform response.
为 GMV Max 运营而设计Designed for GMV Max operations
首个审核版本聚焦只读分析和安全预演，写入权限在后续单独申请。The first review release focuses on read-only analysis and safe previews. Write access will be requested separately.
统一运营视图Unified operations view
按广告账户、店铺、计划、商品和素材查看表现，并保留数据来源与同步时间。Review performance by advertiser, shop, campaign, product and creative, with source and sync timestamps preserved.
- 多店铺上下文Multi-shop context每条数据绑定明确店铺Every record maps to a known shop
- 规则条件Rule conditionsROI、预算、消耗和订单ROI, budget, spend and orders
- 安全边界Safety limits冷却、限额和熔断Cooldowns, caps and kill switch
- 双通道适配Two data adapters官方 API 优先，插件用于本地上下文Official API first, extension for local context
安全预演Safe preview
规则命中后先生成计划，不直接修改广告账户。Matched rules generate a plan before touching an advertiser account.
DRY RUN默认执行模式default execution mode完整审计Complete audit
规则预演和真实动作使用同一套可追踪执行链。Rule previews and real actions use the same traceable execution pipeline.
BEFORE / AFTER保留前后值before and after values retained权限申请保持最小化Permission requests stay minimal
平台批准之前不启用官方同步。首轮只申请交付分析和预演所必需的读取权限。Official sync remains inactive before approval. The first request includes only access needed for analysis and previews.
真实控制台，安全演示数据Real console, safe demonstration data
审核员可以查看已实现的多店铺看板、规则编辑器、安全策略和审计日志。演示环境不触碰真实广告账户。Reviewers can inspect the implemented multi-shop dashboard, rule builder, safety policy and audit log without touching a live advertiser.
- DEMO MODE使用明确标注的示例数据Uses clearly labeled sample data
- WRITE LOCK官方和插件写入均默认关闭Official and extension writes are off by default
- OAUTH VAULT凭据只在服务端加密保存Credentials are encrypted server-side only
审核所需信息集中在一处Everything a reviewer needs, in one place
查看权限用途、OAuth 回调、测试路径、安全限制、隐私政策和数据删除流程。Review permission purposes, OAuth callback, test path, safety limits, privacy policy and data deletion process.