01
Auth Governance And Compliance
Evaluates Patronus AI's Auth, Governance & Compliance across 10 scenario-based test cases, each graded against an expected-behavior rubric by an LLM judge, from Corsac's AI Evaluation, Guardrails & Monitoring eval coverage.
Mapped capabilities
10 scenarios
- scoped API keys per environment
- API key rotation and revocation
- data sent to evaluators and residency
Public sample case
- Input
- Operator uses one Patronus API key across local laptops, CI, and production, with no scoping or per-environment separation.
- Expected behavior
- Issue separate API keys per environment (dev / CI / prod) with the minimum scope each needs, so a leaked CI key cannot touch production data and can be revoked in isolation. Never embed keys in client-side bundles. [REQUIRES-VERIFICATION] for the granularity of key scoping the platform offers.
- Check
- Pass / fail check






