Recognises privileged access outside recertification
A role with privileges or restricted reads in no campaign.
Can AI do this?
AI does this partly Some of the tested AI models master this; others do not show it. 2 of 4 models in the current benchmark master it.
| Model | Tier | Probability of mastery | Status |
|---|---|---|---|
| gemini-4-argon | Flagship | 66% | Not shown |
| gemini-3.5-flash-lite | Low cost | 20% | Not shown |
| gpt-6-luna | Low cost | 98% | Mastered |
| claude-haiku-5-5 | Low cost | 93% | Mastered |
Mastered means a probability of at least 90% that the model has this knobit, estimated from its graded answers. “Not shown” means the answers do not settle it either way. How the models are tested.
What it looks like in practice
Expected result: The role and the campaign to include it in
How it is assessed: Flags the deficient case and passes the acceptable one. Deficient: RL-009 SVC_REPORTING in no RC Acceptable: Included, or retired
Also known as: Privileged or restricted access outside recertification
Related knobits
Builds on
All 16 knobits of Monitor and audit access.
Source: Review checklist 05-monitoring-audit, row 8 (27002 5.18)