Structured Decomposition for Reliable LLM-Generated Access Control Policies

arXiv:2609.24036 · cs.AI, cs.CR · Submitted 2026-09-21 · Read on arXiv

cs.AI, cs.CR

Submitted: 2026-09-21

Updated: 2026-09-21

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

• Open Policy Agent — 9× in this paper
• Verification — 8× in this paper · explained in 2 episodes
• Accuracy — 6× in this paper · explained in 1 episode
• Core — 6× in this paper · explained in 2 episodes
• Failure Modes — 5× in this paper · explained in 3 episodes
• AI Agents — 4× in this paper · explained in 2 episodes
• Actor — 2× in this paper · explained in 3 episodes
• Adaptability — 2× in this paper · explained in 1 episode
• Consistency — 2× in this paper · explained in 3 episodes
• Grounding — 2× in this paper · explained in 3 episodes
• Human-in-the-Loop — 2× in this paper · explained in 3 episodes
• Adaptation — 1× in this paper · explained in 1 episode
• Distillation — 1× in this paper · explained in 2 episodes
• Entity Grounding — 1× in this paper · explained in 2 episodes
• Fine-Tuning — 1× in this paper · explained in 5 episodes
• GRPO — 1× in this paper · explained in 6 episodes
• Generative AI — 1× in this paper · explained in 2 episodes
• Hallucination — 1× in this paper · explained in 3 episodes
• Hybrid System — 1× in this paper · explained in 2 episodes
• Iterative Refinement — 1× in this paper · explained in 3 episodes
• Knowledge Distillation — 1× in this paper · explained in 11 episodes
• Large Language Models (LLMs) — 1× in this paper · explained in 6 episodes
• Modularity — 1× in this paper · explained in 9 episodes
• Multi-Agent Framework — 1× in this paper · explained in 3 episodes
• Prompt Engineering — 1× in this paper · explained in 4 episodes
• RAG — 1× in this paper · explained in 3 episodes
• Robustness — 1× in this paper · explained in 5 episodes
• Selection Bias — 1× in this paper · explained in 4 episodes
• Structured Prompting — 1× in this paper · explained in 2 episodes
• Verifiability — 1× in this paper · explained in 2 episodes
• Xtensible Access Control Markup Language — 1× in this paper

Sources

• Evaluating Large Language Models Trained on Code
• Let's Verify Step by Step
• Governance-as-a-Service: A Multi-Agent Framework for AI System Compliance and Policy Enforcement
• SoK: Access Control Policy Generation from High-level Natural Language Requirements
• RAGent: Retrieval-based Access Control Policy Generation
• Multi-Agent Code-Orchestrated Generation for Reliable Infrastructure-as-Code
• ArGen: Auto-Regulation of Generative AI via GRPO and Policy-as-Code
• Authenticated Delegation and Authorized AI Agents
• DePLOI: Applying NL2SQL to Synthesize and Audit Database Access Control
• Deployability-Centric Infrastructure-as-Code Generation: Fail, Learn, Refine, and Succeed through LLM-Empowered DevOps Simulation

Related papers

• MAVEN-T: Reinforced Heterogeneous Distillation for Real-Time Multi-Agent Trajectory Prediction
• Model Discovery Agent: LLM-assisted Bayesian experiment design for data-efficient discovery of mechanistic world models
• The Clinician's Veto: Navigating Trust, Liability, and Uncertainty in Autonomous AI Prescribing
• MindHelper: Closed-Loop Embodied Mental-State Reasoning for Precision Intervention
• Incumbent Advantage: Brand Bias and Cognitive Manipulation Dynamics in LLM Recommendation Systems
• VSAL: A Vision Solver with Adaptive Layouts for Graph Property Detection