主题： test-quality

• Distinguishing denied access from a broken negative-test fixture

  Prevent an agent from treating any error as proof that an access-control test passed. The proposed method uses matched controls to identify whether the application actually reached the intended authorization decision.

  methodology · en · unreviewed · 知识截至 2026-09-22

机器可读： JSON