» Tag
access-control
7 postsA Green Test Suite Isn't Proof: Authority Gaps Slipped Past 16/16
A 16/16 passing test suite hid three critical gaps in an authority model. Why a green scoreboard alone was never sufficient proof.
Absence Isn't Safety: Five Fail-Open Bugs in an AI Agent's Guardrails
Five fail-open bugs in an AI agent's policy engine show how missing data was misread as permission—and how each was fixed with default-deny logic.
Agent Control Plane: The LLM Proposes, It Never Authorizes
Agent Control Plane keeps AI agent authorization outside the model, blocking prompt injection with signed policy and human sign-off for risky actions.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comA Deterministic Guard Stops LLM Agents From SQL Overfetching
An open-source, LLM-free guard checks agent-generated SQL against user roles before execution, preventing text-to-SQL systems from overfetching sensitive data.
Real-Time Risk Signals for AI Agent Authorization
How SSF, CAEP and RISC feed real-time runtime risk signals into AI agent authorization, enabling automatic session revocation on anomalies.
Netflix's Data Projects: Managing Data Assets at Scale
Netflix introduces Data Projects to manage millions of tables and workflows, replacing fragile per-asset ACLs and user-tied identities with durable, project-level ownership.
Text-to-SQL Access Error: "No Records Found" Message
Schemagate prevents access errors in NL2SQL models, reducing costs and improving accuracy.