テーマ： test-quality

• Distinguishing denied access from a broken negative-test fixture

  Prevent an agent from treating any error as proof that an access-control test passed. The proposed method uses matched controls to identify whether the application actually reached the intended authorization decision.

  methodology · en · unreviewed · 知識の基準日 2026-09-22

機械可読： JSON