Skip to content

feat: promote build-rls-003-org-roles-permissions to benchmark suite - #162

Draft
mattrossman wants to merge 5 commits into
mainfrom
mattrossman/ai-1006-promote-build-rls-003-org-roles-permissions
Draft

feat: promote build-rls-003-org-roles-permissions to benchmark suite#162
mattrossman wants to merge 5 commits into
mainfrom
mattrossman/ai-1006-promote-build-rls-003-org-roles-permissions

Conversation

@mattrossman

@mattrossman mattrossman commented Aug 3, 2026

Copy link
Copy Markdown
Collaborator

Promotes build-rls-003-org-roles-permissions to the benchmark suite and tweaks its prompt / scoring.

Originally this scenario also tested the soft-delete and audit log implementation pattern, for which I found motivations _ and _ respectively, however I removed these from the scenario to keep the focus on RLS.

  • Added motivation
  • Simplified prompt
  • Seeds a leftover "Enable read access for all users" policy similar to Studio's default template so agents have to fix the existing security hole
  • Fixes two scorer bugs where a plausible-but-different agent implementation (revoking DELETE outright vs. a soft-delete trigger) threw an uncaught error and silently aborted the rest of the checks

The catch is agents already pass this across the board, so it may not be sufficiently challenging for benchmark.

CleanShot 2026-08-04 at 09 28 59@2x

Preview: https://evals-git-mattrossman-ai-1006-promote-build-rls-47a093-supabase.vercel.app/?group=eval&sheet=eval&item=build-rls-003-org-roles-permissions

Closes AI-1006

@vercel

vercel Bot commented Aug 3, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
evals Ready Ready Preview Aug 4, 2026 2:08pm

Request Review

@mattrossman mattrossman added the run-evals-changed Add to a PR to refresh only the benchmark evals that have had changes label Aug 3, 2026
Drops soft-delete and audit-log requirements. They weren't part of
the actual motivation for promoting this scenario (org/role RLS
complexity), and every scorer bug we hit lived in that bolted-on
logic.
…d-rls-003-org-roles-permissions' into mattrossman/ai-1006-promote-build-rls-003-org-roles-permissions
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

run-evals-changed Add to a PR to refresh only the benchmark evals that have had changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant