Skip to content

Author

Ting Yan

We have 2 of 3 papers

We haven’t gathered this author’s papers yet. Follow them and we’ll fetch their work.

Not the right person? Other researchers publish under this name.

Review Aug 2026

When"Do Not"Is Not Deny: Security Rules in CLAUDE.md vs Built-In Controls

In CLAUDE.md,"do not"is a natural-language instruction that the model interprets. Claude Code's deny is a built-in control that blocks an action before the agent can take it. Both can express the same security goal, but they control the agent in different ways. We measure this gap in 481 public CLAUDE.md files. An LLM...

Ting Yan · 0 citations
Review Aug 2026

Do User-Authored Permission Policies Improve Protection Against AI Agent Overreach?

A mechanism in which a language model maps actions to plain-language consequence categories with user-authored"allow","ask", or"never"rules is examined, and a gap between preference and commitment is revealed: repeatedly choosing "ask" preserves case-by-case choice but prevents a standing policy from settling decisions...

Ting Yan · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.