Reparo: LLM-aided pipeline for access control policy synthesis and validation
Reparo synthesizes and repairs policies from repository evidence for Cedar, OpenFGA, and Rego, achieving 99.0-100% valid policies.
Stories per day · 30 days
1 RSS
4 stories, newest first · one card per story
Stories tagged #cedar
Paper defines checks between a policy allow and execution admission
An offline review of 72 OPA and Cedar scenarios kept historical failures and did not rerun the engines.
RAISE: Reinforcing Access Control Policy Synthesis in LLMs via Symbolic Evaluation
RAISE fine-tunes Qwen3.5-9B with verifier feedback so it writes Cedar policies better than GPT-6 and Claude.
Your AI agent's system prompt is not a security control
AWS and SANS guidance says system prompts are not security controls; enforce user permissions at retrieval time and default-deny every agent tool invocation.
2