الملخص
Repository instruction files guide coding agents, but also expose them to prompt injection. Malicious rules can request credential access or data transfer while the agent produces a correct patch. We present Aletheia, a framework for permission-minimality testing. Aletheia translates requested authority into a typed language and synthesizes executable sandbox configurations. It runs the unchanged rule and task under full permissions and independent restrictions that remove one permission at a time. Passing independent functional tests under strictly reduced authority provides a dispensability witness, which Aletheia interprets against task context to diagnose suspicious requests. We formalize synthesis and the conditions connecting witnesses to enforced restrictions. On a shared refactoring task, Aletheia executes and detects all 314 AIShellJack attack inputs, with no alarms on five benign templates. Among 80 manually verified benign GHAgentFiles rules, it raises three false positives (3.75%).
الكلمات المفتاحية
الموضوع
بيانات النشر
- المجلة
- غير متاح
- وصول مفتوح
- وصول مفتوح أخضر
اقتبس هذه المقالة
APA 7
Shi, J., Chen, Y., He, J., Liu, Y., & Lo, D. (2026). Aletheia: Permission-Minimality Testing for Coding-Agent Rules. https://omanscience.com/ar/articles/aletheia-permission-minimality-testing-for-coding-agent-rules
MLA 9
Shi, Jieke, et al. "Aletheia: Permission-Minimality Testing for Coding-Agent Rules." https://omanscience.com/ar/articles/aletheia-permission-minimality-testing-for-coding-agent-rules.
شيكاغو (المؤلف–التاريخ)
Shi, Jieke, Yuchen Chen, Junda He, Yue Liu, and David Lo. 2026. "Aletheia: Permission-Minimality Testing for Coding-Agent Rules." https://omanscience.com/ar/articles/aletheia-permission-minimality-testing-for-coding-agent-rules.
هارفارد
Shi, J., Chen, Y., He, J., Liu, Y. and Lo, D. (2026) 'Aletheia: Permission-Minimality Testing for Coding-Agent Rules', Available at: https://omanscience.com/ar/articles/aletheia-permission-minimality-testing-for-coding-agent-rules.
فانكوفر
Shi J, Chen Y, He J, Liu Y, Lo D. Aletheia: Permission-Minimality Testing for Coding-Agent Rules. https://omanscience.com/ar/articles/aletheia-permission-minimality-testing-for-coding-agent-rules
IEEE
J. Shi, Y. Chen, J. He, Y. Liu, and D. Lo, "Aletheia: Permission-Minimality Testing for Coding-Agent Rules," https://omanscience.com/ar/articles/aletheia-permission-minimality-testing-for-coding-agent-rules.