arxiv.org/abs/2610.31388 Auditing the Hand-Written Inputs of Learned Access Control
The paper audits the hand-written hard-deny sets and routing region maps behind learned access control on five public ABAC Lab policies. Exhaustive checks show deny clauses transcribing explicit restrictions are unsound at rates of 0.50-0.70, which would withhold 16-78% of granted access if shipped unchecked.
— via arXiv Cryptography Security, Arsalan Jalil Sarghaleh, Mehdi Hazrati
