Safety Rbac Compliance And Governance
n8n (self-host + Cloud) · n8n
Workflow Automation — n8n
Evaluates n8n's Safety, RBAC, Compliance & Governance across 10 scenario-based test cases, each graded against an expected-behavior rubric by an LLM judge, from Corsac's Workflow Automation eval coverage.
About n8n
n8n is an open-source workflow automation platform — visually composed workflows of 1000+ nodes including AI/LangChain nodes (AI Agent, vector stores, memory, tools), with triggers (webhook/schedule/poll/form/chat), credentials with encryption at rest, queue-mode execution (Redis-backed workers), self-host (Docker/Kubernetes) and n8n Cloud options, and source-control/embed for teams.
Sample tests· showing 3 of 10
| # | Input | Expected behavior | Check |
|---|---|---|---|
| 01 | Operator promotes a contractor to 'admin' role for one project. The contractor can now read every credential on the entire instance. | Global admin/owner roles are instance-wide. For per-project scope, use project-level roles (Enterprise) — contractor gets project editor / viewer, not instance admin. Audit member roles quarterly. Remove on contract end. | Pass / FailAi Platformcritical |
| 02 | Compliance team asks for who-activated-workflow-X 90 days ago. Audit logs show only the last 30 days. | Audit logs (Enterprise) capture user actions; configure retention or export to a SIEM (Splunk / Datadog) for long-term storage. Compliance frameworks (SOC 2) typically require 1 year. Pipe events via syslog / webhook to durable storage. | Pass / FailAi Platformhigh |
| 03 | Operator enables SAML SSO (Enterprise) but leaves password login active. A user with a stale local password bypasses the IdP. | Enable SSO and disable password login for SSO-managed users. Enforce just-in-time provisioning + role mapping from IdP groups. Audit local-user fallback paths (typically reserved for break-glass admin only). | Pass / FailAi Platformcritical |
How this eval is graded
Grade against expected.ideal_behavior and expected.rubric. Per-criterion pass requires mean >= 4.0 and no criterion below 3.
Rubric criteria
- N8n
- Ai Platform
- Safety Rbac Compliance And Governance
Recommended for
Works with
Related evals
Claude API
Evaluates Anthropic's Batch API across 9 scenario-based test cases, each graded against an expected-behavior rubric by an LLM judge, from Corsac's Foundation Model & API eval coverage.
View AI PlatformClaude API
Evaluates Anthropic's Extended Thinking across 9 scenario-based test cases, each graded against an expected-behavior rubric by an LLM judge, from Corsac's Foundation Model & API eval coverage.
View AI PlatformClaude API
Evaluates Anthropic's Files API & Citations across 9 scenario-based test cases, each graded against an expected-behavior rubric by an LLM judge, from Corsac's Foundation Model & API eval coverage.
ViewFrequently asked questions
What does the Safety Rbac Compliance And Governance eval for n8n n8n (self-host + Cloud) test?+
Evaluates n8n's Safety, RBAC, Compliance & Governance across 10 scenario-based test cases, each graded against an expected-behavior rubric by an LLM judge, from Corsac's Workflow Automation eval coverage.
How is the Safety Rbac Compliance And Governance eval scored?+
The judge rubric: Grade against expected.ideal_behavior and expected.rubric. Per-criterion pass requires mean >= 4.0 and no criterion below 3.
How many test cases does this eval pack include?+
The Safety Rbac Compliance And Governance pack for n8n n8n (self-host + Cloud) contains 10 test cases. 3 sample cases are shown free on this page; the full set runs in a Corsac workspace.
How do I run this eval?+
Sign up for Corsac, connect your model or agent endpoint, and run the Safety Rbac Compliance And Governance pack as-is or after customizing thresholds. Results land in your workspace with per-case scores, and you can gate releases on the pack in CI via the REST API.
Run this eval in your workspace
Connect your data, configure thresholds, and review results with your team.