From 204ed16104e629d819a0dafd38aab21866cc14de Mon Sep 17 00:00:00 2001 From: Sai Sree Laya Chukkappalli Date: Thu, 6 Aug 2026 09:48:06 -0400 Subject: [PATCH 1/5] feat: add sample guidance file Signed-off-by: Sai Sree Laya Chukkappalli --- examples/hr-cpex-demo/smith/guidance.txt | 12 ++++++++++++ 1 file changed, 12 insertions(+) create mode 100644 examples/hr-cpex-demo/smith/guidance.txt diff --git a/examples/hr-cpex-demo/smith/guidance.txt b/examples/hr-cpex-demo/smith/guidance.txt new file mode 100644 index 0000000..50306fe --- /dev/null +++ b/examples/hr-cpex-demo/smith/guidance.txt @@ -0,0 +1,12 @@ +1. Bob as an authorized HR user can access compensation records. +2. Alice as an engineer without the required HR authorization must be denied access. +3. Bob when authorized to view SSNs may receive the full compensation record. +4. Eve who does not have SSN access may receive compensation information but her SSN must be redacted before the request reaches the tool. +5. Alice may access repositories within her authorized scope. Requests for repositories outside her permitted scope must be denied. +6. Bob may be denied access to a repository based on team membership before the downstream repository policy is evaluated. +7. When Bob attempts to send an email containing an SSN, the email must be blocked and the attempt must be recorded in the audit log. +8. If Bob accesses sensitive compensation information and subsequently attempts to email it, the later email must be blocked even if the email body itself does not contain the sensitive data. +9. If Eve taints a session and Bob later reuses the same session identifier Bob's security state must remain isolated from Eve's. Eve's session taint must not automatically apply to Bob. +10.Bob may adjust compensation by $10,000 or less without additional approval when otherwise authorized. +11.Bob may not immediately apply a compensation adjustment greater than $10,000. The operation must be suspended until an authorized human such as Alice approves it. +12. Unauthorized requests from Alice, Bob, or Eve must be denied before the protected operation executes. From 3c934420144c9312c088c721a1adf31d6fe09739 Mon Sep 17 00:00:00 2001 From: Sai Sree Laya Chukkappalli Date: Thu, 6 Aug 2026 10:24:33 -0400 Subject: [PATCH 2/5] fix: modify sample guidance file Signed-off-by: Sai Sree Laya Chukkappalli --- examples/hr-cpex-demo/smith/guidance.txt | 24 ++++++++++++------------ 1 file changed, 12 insertions(+), 12 deletions(-) diff --git a/examples/hr-cpex-demo/smith/guidance.txt b/examples/hr-cpex-demo/smith/guidance.txt index 50306fe..5a2f16f 100644 --- a/examples/hr-cpex-demo/smith/guidance.txt +++ b/examples/hr-cpex-demo/smith/guidance.txt @@ -1,12 +1,12 @@ -1. Bob as an authorized HR user can access compensation records. -2. Alice as an engineer without the required HR authorization must be denied access. -3. Bob when authorized to view SSNs may receive the full compensation record. -4. Eve who does not have SSN access may receive compensation information but her SSN must be redacted before the request reaches the tool. -5. Alice may access repositories within her authorized scope. Requests for repositories outside her permitted scope must be denied. -6. Bob may be denied access to a repository based on team membership before the downstream repository policy is evaluated. -7. When Bob attempts to send an email containing an SSN, the email must be blocked and the attempt must be recorded in the audit log. -8. If Bob accesses sensitive compensation information and subsequently attempts to email it, the later email must be blocked even if the email body itself does not contain the sensitive data. -9. If Eve taints a session and Bob later reuses the same session identifier Bob's security state must remain isolated from Eve's. Eve's session taint must not automatically apply to Bob. -10.Bob may adjust compensation by $10,000 or less without additional approval when otherwise authorized. -11.Bob may not immediately apply a compensation adjustment greater than $10,000. The operation must be suspended until an authorized human such as Alice approves it. -12. Unauthorized requests from Alice, Bob, or Eve must be denied before the protected operation executes. +1. Bob (HR) can access compensation records. +2. Alice (Engineer) cannot access compensation records. +3. Bob can view SSNs only with view_ssn permission. +4 Eve cannot view SSNs so redact SSNs before tool execution. +5. Alice can access only authorized repositories. +6. Bob is denied repository access when team membership is unauthorized. +7. Bob cannot email SSNs while logging the denied attempt. +8. Bob cannot email sensitive data accessed earlier in the same session, even if the email is clean. +9. Eve's session taint does not apply to Bob when the session ID is reused. +10. Bob can adjust compensation by less than equal to $10,000 without approval. +11. Bob requires human approval for compensation adjustments > $10,000. +12. Unauthorized actions by Alice, Bob, or Eve must be denied before any tool execution. \ No newline at end of file From d4b9f7c12b0e8ac37988f35d1beb58cc818ba416 Mon Sep 17 00:00:00 2001 From: Sai Sree Laya Chukkappalli Date: Thu, 6 Aug 2026 11:18:17 -0400 Subject: [PATCH 3/5] fix: modify sample guidance file grouped by tool Signed-off-by: Sai Sree Laya Chukkappalli --- examples/hr-cpex-demo/smith/guidance.txt | 40 +++++++++++++++++------- 1 file changed, 28 insertions(+), 12 deletions(-) diff --git a/examples/hr-cpex-demo/smith/guidance.txt b/examples/hr-cpex-demo/smith/guidance.txt index 5a2f16f..b99694d 100644 --- a/examples/hr-cpex-demo/smith/guidance.txt +++ b/examples/hr-cpex-demo/smith/guidance.txt @@ -1,12 +1,28 @@ -1. Bob (HR) can access compensation records. -2. Alice (Engineer) cannot access compensation records. -3. Bob can view SSNs only with view_ssn permission. -4 Eve cannot view SSNs so redact SSNs before tool execution. -5. Alice can access only authorized repositories. -6. Bob is denied repository access when team membership is unauthorized. -7. Bob cannot email SSNs while logging the denied attempt. -8. Bob cannot email sensitive data accessed earlier in the same session, even if the email is clean. -9. Eve's session taint does not apply to Bob when the session ID is reused. -10. Bob can adjust compensation by less than equal to $10,000 without approval. -11. Bob requires human approval for compensation adjustments > $10,000. -12. Unauthorized actions by Alice, Bob, or Eve must be denied before any tool execution. \ No newline at end of file +## Tool1: `get_compensation` + +1. HR Employees can access compensation records. +2. Non-HR Employees cannot access compensation records. +3. Employees with `view_ssn` permission can view SSNs in compensation records. +4. Employees without `view_ssn` permission cannot view SSNs and SSNs must be redacted before the request reaches the tool. + +## Tool2: `search_repos` + +5. Employees can access repositories only within their authorized scope. +6. Employees without required team membership cannot access the repository. + +## Tool3: `send_email` + +7. Employees cannot send SSNs through email. +8. Email containing SSNs must be blocked and the attempt must be recorded in the audit log. +9. Employees cannot send sensitive data accessed earlier in the same session, even if the current email does not contain the sensitive data. +10. Session taint is isolated by employee; one employee's tainted session does not affect another employee's session. + +## Tool4: `adjust_compensation` + +11. Authorized Employees can adjust compensation by $10,000 or less without additional approval. +12. Authorized Employees require human approval to adjust compensation by more than $10,000. +13. Compensation adjustments requiring approval must be suspended until approval is granted. + +## General + +14. Unauthorized tool calls must always be blocked before tool execution. From 8f09b03ff1b8147e110f702744c4a286f601fe1c Mon Sep 17 00:00:00 2001 From: Sai Sree Laya Chukkappalli Date: Thu, 6 Aug 2026 11:45:55 -0400 Subject: [PATCH 4/5] fix: modify sample guidance file grouped by tool Signed-off-by: Sai Sree Laya Chukkappalli --- examples/hr-cpex-demo/smith/guidance.txt | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/examples/hr-cpex-demo/smith/guidance.txt b/examples/hr-cpex-demo/smith/guidance.txt index b99694d..2b3a03e 100644 --- a/examples/hr-cpex-demo/smith/guidance.txt +++ b/examples/hr-cpex-demo/smith/guidance.txt @@ -15,13 +15,13 @@ 7. Employees cannot send SSNs through email. 8. Email containing SSNs must be blocked and the attempt must be recorded in the audit log. 9. Employees cannot send sensitive data accessed earlier in the same session, even if the current email does not contain the sensitive data. -10. Session taint is isolated by employee; one employee's tainted session does not affect another employee's session. + ## Tool4: `adjust_compensation` -11. Authorized Employees can adjust compensation by $10,000 or less without additional approval. -12. Authorized Employees require human approval to adjust compensation by more than $10,000. -13. Compensation adjustments requiring approval must be suspended until approval is granted. +10. Authorized Employees can adjust compensation by $10,000 or less without additional approval. +11. Authorized Employees require human approval to adjust compensation by more than $10,000. +12. Compensation adjustments requiring approval must be suspended until approval is granted. ## General From b5ec289788478e7f005445665472e2017b0c7c2f Mon Sep 17 00:00:00 2001 From: Sai Sree Laya Chukkappalli Date: Thu, 6 Aug 2026 11:47:26 -0400 Subject: [PATCH 5/5] fix: modify sample guidance file grouped by tool Signed-off-by: Sai Sree Laya Chukkappalli --- examples/hr-cpex-demo/smith/guidance.txt | 10 ++++------ 1 file changed, 4 insertions(+), 6 deletions(-) diff --git a/examples/hr-cpex-demo/smith/guidance.txt b/examples/hr-cpex-demo/smith/guidance.txt index 2b3a03e..3a112c6 100644 --- a/examples/hr-cpex-demo/smith/guidance.txt +++ b/examples/hr-cpex-demo/smith/guidance.txt @@ -14,15 +14,13 @@ 7. Employees cannot send SSNs through email. 8. Email containing SSNs must be blocked and the attempt must be recorded in the audit log. -9. Employees cannot send sensitive data accessed earlier in the same session, even if the current email does not contain the sensitive data. - ## Tool4: `adjust_compensation` -10. Authorized Employees can adjust compensation by $10,000 or less without additional approval. -11. Authorized Employees require human approval to adjust compensation by more than $10,000. -12. Compensation adjustments requiring approval must be suspended until approval is granted. +9. Authorized Employees can adjust compensation by $10,000 or less without additional approval. +10. Authorized Employees require human approval to adjust compensation by more than $10,000. +11. Compensation adjustments requiring approval must be suspended until approval is granted. ## General -14. Unauthorized tool calls must always be blocked before tool execution. +12. Unauthorized tool calls must always be blocked before tool execution.