Dropbox 集成 MCP 与 Dash，弥合安全设计与代码审查的鸿沟
原标题：Dropbox Integrates MCP and Dash to Close the Gap Between Security Design and Code Review
AI 摘要
Dropbox 推出一种新的工程方法，通过模型上下文协议（MCP）和内部知识系统 Dash，将安全设计文档与代码审查工作流直接连接，以解决安全需求在设计阶段定义但执行阶段缺乏上下文的问题。该系统在代码审查界面中呈现相关的威胁模型和安全要求，减少上下文切换，但不替代安全审查员的判断。该模式未来还可用于合规验证、设计审查等治理工作流。
正文节选
Dropbox has introduced a new engineering approach that connects security design artifacts directly with code review workflows using Model Context Protocol (MCP) and its internal knowledge system, Dash. The initiative aims to address a persistent gap in large engineering organizations: security requirements are typically defined during design reviews, but enforcement and verification occur much later, during code reviews, often without full context. In many teams, threat models, design documents,