Multi-tenant permission check
You're adding a `can(user, action, resource)` permission check to a multi-tenant SaaS in TypeScript, backing role-based access with per-resource ownership and org boundaries. You want an AI agent to implement the authorization core. Write the prompt/spec — constraints, edge cases, acceptance criteria — so it gets it right first try, given this is a security boundary. Explain what a loose prompt ("add a permissions check for roles") gets dangerously wrong.
authorize_requests(request_lines: list[str]) → list[bool][["u1|admin|active|org1|delete|org1|u2","u1|admin|active|org1|delete|org2|u2"]]out[true,false][["u2|member|active|org1|update|org1|u2","u2|member|active|org1|update|org1|u3","u2|member|active|org1|read|org1|u3"]]out[true,false,true]Treat the AI’s output as a draft to verify, not an answer to trust. Name the specific flaw and the input that triggers it, say how you’d catch it (tests, edge cases, reading critically), and how you’d re-prompt or decompose to get it right.
Vibe & agentic: describe the solution in plain language (or narrate it) and the coach grades your approach.