{
  "article_id": "IL-16",
  "article_title": "IL-16: AI Gave a Test Login Access to Every Database",
  "source_revision": "661f11046041ed2c1b351ad361313171cc02df5d",
  "scope": "One CentOS Stream 10 Galera run. Grant creation and subsequent commands checked against the source record.",
  "sources": {
    "prompt": "https://github.com/open-sudo/infraset/blob/661f11046041ed2c1b351ad361313171cc02df5d/jobs/5469/2026-09-04__20-11-34/mariadb-galera-cluster-bash-centos-stream10-5469/instruction.md",
    "configuration": "https://github.com/open-sudo/infraset/blob/661f11046041ed2c1b351ad361313171cc02df5d/jobs/5469/2026-09-04__20-11-34/mariadb-galera-cluster-bash-centos-stream10-5469/mariadb-galera-cluster-centos-st__xGkGfCU/config.json",
    "commands": "https://github.com/open-sudo/infraset/blob/661f11046041ed2c1b351ad361313171cc02df5d/jobs/5469/2026-09-04__20-11-34/mariadb-galera-cluster-bash-centos-stream10-5469/mariadb-galera-cluster-centos-st__xGkGfCU/agent/executor-commands.jsonl",
    "observations": "https://github.com/open-sudo/infraset/blob/661f11046041ed2c1b351ad361313171cc02df5d/jobs/5469/2026-09-04__20-11-34/mariadb-galera-cluster-bash-centos-stream10-5469/mariadb-galera-cluster-centos-st__xGkGfCU/verifier/global-observations.json",
    "evaluation": "https://github.com/open-sudo/infraset/blob/661f11046041ed2c1b351ad361313171cc02df5d/jobs/5469/2026-09-04__20-11-34/mariadb-galera-cluster-bash-centos-stream10-5469/mariadb-galera-cluster-centos-st__xGkGfCU/verifier/evaluation-report.json",
    "grant_semantics": "https://mariadb.com/docs/server/reference/sql-statements/account-management-sql-statements/grant#global-privileges",
    "host_matching": "https://mariadb.com/docs/server/reference/sql-statements/account-management-sql-statements/create-user#account-names"
  },
  "findings": [
    {
      "claim": "All three members report cluster size 3 and Synced",
      "command_lines": [
        50,
        52,
        54
      ]
    },
    {
      "claim": "galtest receives ALL PRIVILEGES ON *.* with host %; galeratest database is created",
      "command_lines": [
        58
      ]
    },
    {
      "claim": "Local mysql commands write and read galeratest.t1 without selecting galtest",
      "command_lines": [
        60,
        62,
        64,
        66
      ]
    },
    {
      "claim": "Write accepted with node2 stopped; node2 rejoins and reads it",
      "command_lines": [
        68,
        70,
        72,
        74,
        76
      ]
    },
    {
      "claim": "Final checks show three synced members and four rows; no subsequent command drops the account or narrows the grant",
      "command_lines": [
        112,
        114
      ]
    }
  ]
}