From fca6731f8e5e135f20ba80c8f0e820319df65a38 Mon Sep 17 00:00:00 2001 From: Ashish Sinha Date: Sat, 17 Oct 2026 20:08:00 -0600 Subject: [PATCH] Add weekly article: a benchmark found a bug in an access-control check --- weekly/benchmark-found-access-control-bug.yml | 6 ++++++ 1 file changed, 6 insertions(+) create mode 100644 weekly/benchmark-found-access-control-bug.yml diff --git a/weekly/benchmark-found-access-control-bug.yml b/weekly/benchmark-found-access-control-bug.yml new file mode 100644 index 0000000..d51ffe8 --- /dev/null +++ b/weekly/benchmark-found-access-control-bug.yml @@ -0,0 +1,6 @@ +article: + author: + name: "Ashish Sinha" + link: "https://dev.to/ashish_sinha_5241c7673d93/a-benchmark-found-a-bug-in-my-access-control-check-after-the-fix-it-scored-0984-1fnj" + review: "Testing text-to-SQL access control against Spider-ACL, a peer-reviewed benchmark whose labels come from PostgreSQL GRANTs, exposed a fail-closed parser bug that had silently refused valid queries; after the fix it reached refusal F1 0.984 over 19,624 role-labelled questions, with every answered query audited against the grants." + tags: "data-governance, access-control, text-to-sql, llm, postgresql" \ No newline at end of file