Evidence · DiggingBeagle record
Datadog: Security rules in three coding-agent runs
- Source role
- primary disclosure
Evidence record
Claim-level citations (1)
- supportsSecurity rules did not consistently become effective application controls: The ownership IDOR persisted for Sonnet and Composer but was absent in the GPT security build; Composer's secret-check ordering left a fallback-secret guard ineffective.
Models using security rules; Analysis: Security rules versus no security rules