The rule change flow guides users through requirement confirmation, preview, apply, and validation when features such as data encryption or data masking create reviewable database governance changes. It is not a standalone business feature. Users usually enter this flow from a concrete data encryption or data masking task.
| Phase | User action | Focus |
|---|---|---|
| Describe the requirement | Provide the logical database, table, column, and governance goal. | Clear input makes the generated plan more stable. |
| Provide missing information | Add algorithm choices, parameters, secret placeholders, or execution preferences when asked. | Sensitive values should be provided through protected channels. |
| Review the plan | Review generated rule DistSQL, change artifacts, and impact scope. | Confirm that the plan matches business expectations. |
| Preview the change | Ask to preview first without changing runtime state. | Check statements and side effects before execution. |
| Apply the change | Confirm automatic execution, or export a manual package for operators. | Side-effecting changes must be confirmed. |
| Validate the result | Check rule state or workflow execution results returned by the feature plugin. | Confirm that the change has taken effect. |
| User wording | What users receive | Focus |
|---|---|---|
| “Preview first, do not execute.” | Change content and impact scope only. | Use this to confirm statements, change artifacts, and side effects first. |
| “Confirm and execute the previous plan.” | The previewed and confirmed change is executed. | Use this only after the user has completed review. |
| “Export a manual execution package.” | Statements that operators can review and execute manually. | Use this when approval, a change window, or a controlled execution environment is required. |
Rule changes may require sensitive fields such as keys or credentials. These values should not be written into ordinary documents, chat records, or logs.
Recommended handling:
ShardingSphere-MCP does not read secret managers directly. When using a manual package, placeholders can remain in the statements and be replaced by the operator in a controlled environment.
