Access control for AI agents on Rails: gating SQL with Action Policy
Evil Martians, a Ruby on Rails consultancy, discovered that its internal AI assistant Ocean could leak sensitive peer review data through read-only SQL queries, prompting the company to implement acce…