BluStatic's picture
download
raw
283 kB
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0000","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2000: Convert Unix mode 640 to the nine-character symbolic permission string."},{"role":"assistant","content":"rw-r-----"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0001","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2001: Convert symbolic permissions rw------- to a three-digit octal mode."},{"role":"assistant","content":"600"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0002","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2002: A file has mode 644. The actor uses the other permission bits. Can the actor execute the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"DENY; other bits are 4 (r--)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0003","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_03","messages":[{"role":"user","content":"Permission scenario 2003: With umask 002, what mode results when a regular file is created from base mode 666?"},{"role":"assistant","content":"664"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0004","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2004: With umask 022, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"755"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0005","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2005: Choose the least-privilege chmod mode for owner read and write; group read; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"640; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0006","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2006: Directory mode is 754; evaluate the owner class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=true, traverse=true."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0007","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_07","messages":[{"role":"user","content":"Permission scenario 2007: SSH refuses a private key because group members can read it. What least-privilege chmod command should be applied to ~/.ssh/id_ed25519?"},{"role":"assistant","content":"chmod 600 ~/.ssh/id_ed25519"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0008","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2008: A service only reads invoices. Scopes are invoices.read, invoices.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"invoices.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0009","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2009: An API token only fetches billing data and never modifies it. Permissions are billing.read, billing.write and account.admin. Choose the minimum."},{"role":"assistant","content":"billing.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0010","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_10","messages":[{"role":"user","content":"Permission scenario 2010: In this policy engine, explicit DENY overrides ALLOW. Role analyst grants reports.read. The user also has an explicit DENY for reports.read. Is access allowed?"},{"role":"assistant","content":"DENY"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0011","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2011: Convert Unix mode 600 to the nine-character symbolic permission string."},{"role":"assistant","content":"rw-------"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0012","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2012: Convert symbolic permissions rw-r--r-- to a three-digit octal mode."},{"role":"assistant","content":"644"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0013","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2013: A file has mode 750. The actor uses the group permission bits. Can the actor write the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"DENY; group bits are 5 (r-x)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0014","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_03","messages":[{"role":"user","content":"Permission scenario 2014: With umask 077, what mode results when a regular file is created from base mode 666?"},{"role":"assistant","content":"600"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0015","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2015: With umask 002, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"775"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0016","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2016: Choose the least-privilege chmod mode for owner all; group read and execute; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"750; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0017","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2017: Directory mode is 740; evaluate the other class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=false, create_delete=false, traverse=false."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0018","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_07","messages":[{"role":"user","content":"Permission scenario 2018: SSH refuses a private key because group members can read it. What least-privilege chmod command should be applied to ~/.ssh/id_ed25519?"},{"role":"assistant","content":"chmod 600 ~/.ssh/id_ed25519"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0019","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2019: A service only reads projects. Scopes are projects.read, projects.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"projects.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0020","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2020: An API token only fetches repo data and never modifies it. Permissions are repo.read, repo.write and account.admin. Choose the minimum."},{"role":"assistant","content":"repo.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0021","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_10","messages":[{"role":"user","content":"Permission scenario 2021: In this policy engine, explicit DENY overrides ALLOW. Role analyst grants reports.read. The user also has an explicit ALLOW for reports.read. Is access allowed?"},{"role":"assistant","content":"ALLOW"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0022","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2022: Convert Unix mode 644 to the nine-character symbolic permission string."},{"role":"assistant","content":"rw-r--r--"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0023","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2023: Convert symbolic permissions rwxr-x--- to a three-digit octal mode."},{"role":"assistant","content":"750"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0024","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2024: A file has mode 700. The actor uses the owner permission bits. Can the actor read the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"ALLOW; owner bits are 7 (rwx)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0025","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_03","messages":[{"role":"user","content":"Permission scenario 2025: With umask 027, what mode results when a regular file is created from base mode 666?"},{"role":"assistant","content":"640"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0026","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2026: With umask 077, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"700"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0027","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2027: Choose the least-privilege chmod mode for owner read and write; group none; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"600; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0028","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2028: Directory mode is 664; evaluate the group class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=false, traverse=false."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0029","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_07","messages":[{"role":"user","content":"Permission scenario 2029: SSH refuses a private key because group members can read it. What least-privilege chmod command should be applied to ~/.ssh/id_ed25519?"},{"role":"assistant","content":"chmod 600 ~/.ssh/id_ed25519"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0030","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2030: A service only reads reports. Scopes are reports.read, reports.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"reports.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0031","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2031: An API token only fetches files data and never modifies it. Permissions are files.read, files.write and account.admin. Choose the minimum."},{"role":"assistant","content":"files.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0032","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_10","messages":[{"role":"user","content":"Permission scenario 2032: In this policy engine, explicit DENY overrides ALLOW. Role analyst grants reports.read. The user also has an explicit DENY for reports.read. Is access allowed?"},{"role":"assistant","content":"DENY"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0033","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2033: Convert Unix mode 750 to the nine-character symbolic permission string."},{"role":"assistant","content":"rwxr-x---"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0034","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2034: Convert symbolic permissions rwx------ to a three-digit octal mode."},{"role":"assistant","content":"700"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0035","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2035: A file has mode 660. The actor uses the other permission bits. Can the actor execute the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"DENY; other bits are 0 (---)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0036","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_03","messages":[{"role":"user","content":"Permission scenario 2036: With umask 022, what mode results when a regular file is created from base mode 666?"},{"role":"assistant","content":"644"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0037","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2037: With umask 027, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"750"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0038","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2038: Choose the least-privilege chmod mode for owner all; group all; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"770; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0039","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2039: Directory mode is 770; evaluate the owner class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=true, traverse=true."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0040","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_07","messages":[{"role":"user","content":"Permission scenario 2040: SSH refuses a private key because group members can read it. What least-privilege chmod command should be applied to ~/.ssh/id_ed25519?"},{"role":"assistant","content":"chmod 600 ~/.ssh/id_ed25519"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0041","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2041: A service only reads customers. Scopes are customers.read, customers.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"customers.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0042","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2042: An API token only fetches calendar data and never modifies it. Permissions are calendar.read, calendar.write and account.admin. Choose the minimum."},{"role":"assistant","content":"calendar.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0043","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_10","messages":[{"role":"user","content":"Permission scenario 2043: In this policy engine, explicit DENY overrides ALLOW. Role analyst grants reports.read. The user also has an explicit ALLOW for reports.read. Is access allowed?"},{"role":"assistant","content":"ALLOW"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0044","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2044: Convert Unix mode 700 to the nine-character symbolic permission string."},{"role":"assistant","content":"rwx------"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0045","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2045: Convert symbolic permissions rw-rw---- to a three-digit octal mode."},{"role":"assistant","content":"660"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0046","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2046: A file has mode 754. The actor uses the group permission bits. Can the actor write the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"DENY; group bits are 5 (r-x)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0047","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_03","messages":[{"role":"user","content":"Permission scenario 2047: With umask 002, what mode results when a regular file is created from base mode 666?"},{"role":"assistant","content":"664"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0048","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2048: With umask 022, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"755"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0049","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2049: Choose the least-privilege chmod mode for owner read and write; group read and write; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"660; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0050","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2050: Directory mode is 640; evaluate the other class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=false, create_delete=false, traverse=false."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0052","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2052: A service only reads invoices. Scopes are invoices.read, invoices.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"invoices.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0053","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2053: An API token only fetches billing data and never modifies it. Permissions are billing.read, billing.write and account.admin. Choose the minimum."},{"role":"assistant","content":"billing.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0054","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_10","messages":[{"role":"user","content":"Permission scenario 2054: In this policy engine, explicit DENY overrides ALLOW. Role analyst grants reports.read. The user also has an explicit DENY for reports.read. Is access allowed?"},{"role":"assistant","content":"DENY"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0055","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2055: Convert Unix mode 660 to the nine-character symbolic permission string."},{"role":"assistant","content":"rw-rw----"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0056","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2056: Convert symbolic permissions rwxr-xr-- to a three-digit octal mode."},{"role":"assistant","content":"754"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0057","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2057: A file has mode 740. The actor uses the owner permission bits. Can the actor read the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"ALLOW; owner bits are 7 (rwx)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0058","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_03","messages":[{"role":"user","content":"Permission scenario 2058: With umask 077, what mode results when a regular file is created from base mode 666?"},{"role":"assistant","content":"600"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0059","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2059: With umask 002, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"775"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0060","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2060: Choose the least-privilege chmod mode for owner read and write; group read; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"640; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0061","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2061: Directory mode is 600; evaluate the group class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=false, create_delete=false, traverse=false."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0063","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2063: A service only reads projects. Scopes are projects.read, projects.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"projects.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0064","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2064: An API token only fetches repo data and never modifies it. Permissions are repo.read, repo.write and account.admin. Choose the minimum."},{"role":"assistant","content":"repo.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0065","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_10","messages":[{"role":"user","content":"Permission scenario 2065: In this policy engine, explicit DENY overrides ALLOW. Role analyst grants reports.read. The user also has an explicit ALLOW for reports.read. Is access allowed?"},{"role":"assistant","content":"ALLOW"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0066","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2066: Convert Unix mode 754 to the nine-character symbolic permission string."},{"role":"assistant","content":"rwxr-xr--"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0067","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2067: Convert symbolic permissions rwxr----- to a three-digit octal mode."},{"role":"assistant","content":"740"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0068","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2068: A file has mode 664. The actor uses the other permission bits. Can the actor execute the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"DENY; other bits are 4 (r--)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0069","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_03","messages":[{"role":"user","content":"Permission scenario 2069: With umask 027, what mode results when a regular file is created from base mode 666?"},{"role":"assistant","content":"640"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0070","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2070: With umask 077, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"700"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0071","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2071: Choose the least-privilege chmod mode for owner all; group read and execute; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"750; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0072","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2072: Directory mode is 644; evaluate the owner class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=false, traverse=false."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0074","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2074: A service only reads reports. Scopes are reports.read, reports.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"reports.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0075","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2075: An API token only fetches files data and never modifies it. Permissions are files.read, files.write and account.admin. Choose the minimum."},{"role":"assistant","content":"files.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0077","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2077: Convert Unix mode 740 to the nine-character symbolic permission string."},{"role":"assistant","content":"rwxr-----"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0078","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2078: Convert symbolic permissions rw-rw-r-- to a three-digit octal mode."},{"role":"assistant","content":"664"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0079","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2079: A file has mode 770. The actor uses the group permission bits. Can the actor write the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"ALLOW; group bits are 7 (rwx)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0080","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_03","messages":[{"role":"user","content":"Permission scenario 2080: With umask 022, what mode results when a regular file is created from base mode 666?"},{"role":"assistant","content":"644"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0081","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2081: With umask 027, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"750"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0082","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2082: Choose the least-privilege chmod mode for owner read and write; group none; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"600; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0083","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2083: Directory mode is 750; evaluate the other class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=false, create_delete=false, traverse=false."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0085","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2085: A service only reads customers. Scopes are customers.read, customers.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"customers.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0086","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2086: An API token only fetches calendar data and never modifies it. Permissions are calendar.read, calendar.write and account.admin. Choose the minimum."},{"role":"assistant","content":"calendar.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0087","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_10","messages":[{"role":"user","content":"Permission scenario 2087: In this policy engine, explicit DENY overrides ALLOW. Role analyst grants reports.read. The user also has an explicit ALLOW for reports.read. Is access allowed?"},{"role":"assistant","content":"ALLOW"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0088","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2088: Convert Unix mode 664 to the nine-character symbolic permission string."},{"role":"assistant","content":"rw-rw-r--"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0089","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2089: Convert symbolic permissions rwxrwx--- to a three-digit octal mode."},{"role":"assistant","content":"770"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0090","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2090: A file has mode 640. The actor uses the owner permission bits. Can the actor read the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"ALLOW; owner bits are 6 (rw-)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0091","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_03","messages":[{"role":"user","content":"Permission scenario 2091: With umask 002, what mode results when a regular file is created from base mode 666?"},{"role":"assistant","content":"664"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0092","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2092: With umask 022, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"755"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0093","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2093: Choose the least-privilege chmod mode for owner all; group all; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"770; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0094","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2094: Directory mode is 700; evaluate the group class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=false, create_delete=false, traverse=false."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0096","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2096: A service only reads invoices. Scopes are invoices.read, invoices.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"invoices.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0097","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2097: An API token only fetches billing data and never modifies it. Permissions are billing.read, billing.write and account.admin. Choose the minimum."},{"role":"assistant","content":"billing.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0099","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2099: Convert Unix mode 770 to the nine-character symbolic permission string."},{"role":"assistant","content":"rwxrwx---"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0100","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2100: Convert symbolic permissions rw-r----- to a three-digit octal mode."},{"role":"assistant","content":"640"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0101","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2101: A file has mode 600. The actor uses the other permission bits. Can the actor execute the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"DENY; other bits are 0 (---)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0103","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2103: With umask 002, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"775"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0104","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2104: Choose the least-privilege chmod mode for owner read and write; group read and write; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"660; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0105","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2105: Directory mode is 660; evaluate the owner class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=false, traverse=false."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0107","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2107: A service only reads projects. Scopes are projects.read, projects.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"projects.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0108","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2108: An API token only fetches repo data and never modifies it. Permissions are repo.read, repo.write and account.admin. Choose the minimum."},{"role":"assistant","content":"repo.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0110","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2110: Convert Unix mode 640 to the nine-character symbolic permission string."},{"role":"assistant","content":"rw-r-----"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0111","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2111: Convert symbolic permissions rw------- to a three-digit octal mode."},{"role":"assistant","content":"600"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0112","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2112: A file has mode 644. The actor uses the group permission bits. Can the actor write the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"DENY; group bits are 4 (r--)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0113","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_03","messages":[{"role":"user","content":"Permission scenario 2113: With umask 027, what mode results when a regular file is created from base mode 666?"},{"role":"assistant","content":"640"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0114","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2114: With umask 077, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"700"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0115","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2115: Choose the least-privilege chmod mode for owner read and write; group read; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"640; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0116","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2116: Directory mode is 754; evaluate the other class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=false, traverse=false."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0117","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_07","messages":[{"role":"user","content":"Permission scenario 2117: SSH refuses a private key because group members can read it. What least-privilege chmod command should be applied to ~/.ssh/id_ed25519?"},{"role":"assistant","content":"chmod 600 ~/.ssh/id_ed25519"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0118","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2118: A service only reads reports. Scopes are reports.read, reports.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"reports.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0119","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2119: An API token only fetches files data and never modifies it. Permissions are files.read, files.write and account.admin. Choose the minimum."},{"role":"assistant","content":"files.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0120","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_10","messages":[{"role":"user","content":"Permission scenario 2120: In this policy engine, explicit DENY overrides ALLOW. Role analyst grants reports.read. The user also has an explicit DENY for reports.read. Is access allowed?"},{"role":"assistant","content":"DENY"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0121","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2121: Convert Unix mode 600 to the nine-character symbolic permission string."},{"role":"assistant","content":"rw-------"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0122","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2122: Convert symbolic permissions rw-r--r-- to a three-digit octal mode."},{"role":"assistant","content":"644"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0123","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2123: A file has mode 750. The actor uses the owner permission bits. Can the actor read the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"ALLOW; owner bits are 7 (rwx)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0124","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_03","messages":[{"role":"user","content":"Permission scenario 2124: With umask 022, what mode results when a regular file is created from base mode 666?"},{"role":"assistant","content":"644"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0125","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2125: With umask 027, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"750"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0126","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2126: Choose the least-privilege chmod mode for owner all; group read and execute; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"750; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0127","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2127: Directory mode is 740; evaluate the group class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=false, traverse=false."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0128","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_07","messages":[{"role":"user","content":"Permission scenario 2128: SSH refuses a private key because group members can read it. What least-privilege chmod command should be applied to ~/.ssh/id_ed25519?"},{"role":"assistant","content":"chmod 600 ~/.ssh/id_ed25519"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0129","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2129: A service only reads customers. Scopes are customers.read, customers.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"customers.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0130","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2130: An API token only fetches calendar data and never modifies it. Permissions are calendar.read, calendar.write and account.admin. Choose the minimum."},{"role":"assistant","content":"calendar.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0132","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2132: Convert Unix mode 644 to the nine-character symbolic permission string."},{"role":"assistant","content":"rw-r--r--"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0133","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2133: Convert symbolic permissions rwxr-x--- to a three-digit octal mode."},{"role":"assistant","content":"750"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0134","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2134: A file has mode 700. The actor uses the other permission bits. Can the actor execute the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"DENY; other bits are 0 (---)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0137","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2137: Choose the least-privilege chmod mode for owner read and write; group none; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"600; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0138","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2138: Directory mode is 664; evaluate the owner class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=false, traverse=false."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0139","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_07","messages":[{"role":"user","content":"Permission scenario 2139: SSH refuses a private key because group members can read it. What least-privilege chmod command should be applied to ~/.ssh/id_ed25519?"},{"role":"assistant","content":"chmod 600 ~/.ssh/id_ed25519"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0140","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2140: A service only reads invoices. Scopes are invoices.read, invoices.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"invoices.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0141","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2141: An API token only fetches billing data and never modifies it. Permissions are billing.read, billing.write and account.admin. Choose the minimum."},{"role":"assistant","content":"billing.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0143","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2143: Convert Unix mode 750 to the nine-character symbolic permission string."},{"role":"assistant","content":"rwxr-x---"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0144","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2144: Convert symbolic permissions rwx------ to a three-digit octal mode."},{"role":"assistant","content":"700"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0145","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2145: A file has mode 660. The actor uses the group permission bits. Can the actor write the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"ALLOW; group bits are 6 (rw-)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0148","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2148: Choose the least-privilege chmod mode for owner all; group all; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"770; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0149","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2149: Directory mode is 770; evaluate the other class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=false, create_delete=false, traverse=false."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0150","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_07","messages":[{"role":"user","content":"Permission scenario 2150: SSH refuses a private key because group members can read it. What least-privilege chmod command should be applied to ~/.ssh/id_ed25519?"},{"role":"assistant","content":"chmod 600 ~/.ssh/id_ed25519"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0151","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2151: A service only reads projects. Scopes are projects.read, projects.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"projects.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0152","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2152: An API token only fetches repo data and never modifies it. Permissions are repo.read, repo.write and account.admin. Choose the minimum."},{"role":"assistant","content":"repo.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0154","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2154: Convert Unix mode 700 to the nine-character symbolic permission string."},{"role":"assistant","content":"rwx------"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0155","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2155: Convert symbolic permissions rw-rw---- to a three-digit octal mode."},{"role":"assistant","content":"660"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0156","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2156: A file has mode 754. The actor uses the owner permission bits. Can the actor read the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"ALLOW; owner bits are 7 (rwx)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0160","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2160: Directory mode is 640; evaluate the group class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=false, traverse=false."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0161","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_07","messages":[{"role":"user","content":"Permission scenario 2161: SSH refuses a private key because group members can read it. What least-privilege chmod command should be applied to ~/.ssh/id_ed25519?"},{"role":"assistant","content":"chmod 600 ~/.ssh/id_ed25519"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0162","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2162: A service only reads reports. Scopes are reports.read, reports.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"reports.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0163","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2163: An API token only fetches files data and never modifies it. Permissions are files.read, files.write and account.admin. Choose the minimum."},{"role":"assistant","content":"files.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0165","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2165: Convert Unix mode 660 to the nine-character symbolic permission string."},{"role":"assistant","content":"rw-rw----"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0166","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2166: Convert symbolic permissions rwxr-xr-- to a three-digit octal mode."},{"role":"assistant","content":"754"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0167","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2167: A file has mode 740. The actor uses the other permission bits. Can the actor execute the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"DENY; other bits are 0 (---)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0168","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_03","messages":[{"role":"user","content":"Permission scenario 2168: With umask 022, what mode results when a regular file is created from base mode 666?"},{"role":"assistant","content":"644"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0169","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2169: With umask 027, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"750"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0170","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2170: Choose the least-privilege chmod mode for owner read and write; group read; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"640; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0171","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2171: Directory mode is 600; evaluate the owner class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=false, traverse=false."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0172","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_07","messages":[{"role":"user","content":"Permission scenario 2172: SSH refuses a private key because group members can read it. What least-privilege chmod command should be applied to ~/.ssh/id_ed25519?"},{"role":"assistant","content":"chmod 600 ~/.ssh/id_ed25519"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0173","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2173: A service only reads customers. Scopes are customers.read, customers.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"customers.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0174","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2174: An API token only fetches calendar data and never modifies it. Permissions are calendar.read, calendar.write and account.admin. Choose the minimum."},{"role":"assistant","content":"calendar.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0176","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2176: Convert Unix mode 754 to the nine-character symbolic permission string."},{"role":"assistant","content":"rwxr-xr--"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0177","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2177: Convert symbolic permissions rwxr----- to a three-digit octal mode."},{"role":"assistant","content":"740"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0178","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2178: A file has mode 664. The actor uses the group permission bits. Can the actor write the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"ALLOW; group bits are 6 (rw-)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0180","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2180: With umask 022, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"755"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0181","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2181: Choose the least-privilege chmod mode for owner all; group read and execute; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"750; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0182","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2182: Directory mode is 644; evaluate the other class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=false, traverse=false."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0183","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_07","messages":[{"role":"user","content":"Permission scenario 2183: SSH refuses a private key because group members can read it. What least-privilege chmod command should be applied to ~/.ssh/id_ed25519?"},{"role":"assistant","content":"chmod 600 ~/.ssh/id_ed25519"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0184","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2184: A service only reads invoices. Scopes are invoices.read, invoices.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"invoices.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0185","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2185: An API token only fetches billing data and never modifies it. Permissions are billing.read, billing.write and account.admin. Choose the minimum."},{"role":"assistant","content":"billing.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0187","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2187: Convert Unix mode 740 to the nine-character symbolic permission string."},{"role":"assistant","content":"rwxr-----"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0188","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2188: Convert symbolic permissions rw-rw-r-- to a three-digit octal mode."},{"role":"assistant","content":"664"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0189","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2189: A file has mode 770. The actor uses the owner permission bits. Can the actor read the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"ALLOW; owner bits are 7 (rwx)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0190","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_03","messages":[{"role":"user","content":"Permission scenario 2190: With umask 077, what mode results when a regular file is created from base mode 666?"},{"role":"assistant","content":"600"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0191","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2191: With umask 002, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"775"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0192","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2192: Choose the least-privilege chmod mode for owner read and write; group none; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"600; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0193","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2193: Directory mode is 750; evaluate the group class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=false, traverse=true."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0194","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_07","messages":[{"role":"user","content":"Permission scenario 2194: SSH refuses a private key because group members can read it. What least-privilege chmod command should be applied to ~/.ssh/id_ed25519?"},{"role":"assistant","content":"chmod 600 ~/.ssh/id_ed25519"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0195","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2195: A service only reads projects. Scopes are projects.read, projects.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"projects.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0196","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2196: An API token only fetches repo data and never modifies it. Permissions are repo.read, repo.write and account.admin. Choose the minimum."},{"role":"assistant","content":"repo.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0198","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2198: Convert Unix mode 664 to the nine-character symbolic permission string."},{"role":"assistant","content":"rw-rw-r--"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0199","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2199: Convert symbolic permissions rwxrwx--- to a three-digit octal mode."},{"role":"assistant","content":"770"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0200","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2200: A file has mode 640. The actor uses the other permission bits. Can the actor execute the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"DENY; other bits are 0 (---)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0202","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2202: With umask 077, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"700"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0203","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2203: Choose the least-privilege chmod mode for owner all; group all; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"770; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0204","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2204: Directory mode is 700; evaluate the owner class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=true, traverse=true."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0206","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2206: A service only reads reports. Scopes are reports.read, reports.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"reports.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0207","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2207: An API token only fetches files data and never modifies it. Permissions are files.read, files.write and account.admin. Choose the minimum."},{"role":"assistant","content":"files.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0209","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2209: Convert Unix mode 770 to the nine-character symbolic permission string."},{"role":"assistant","content":"rwxrwx---"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0210","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2210: Convert symbolic permissions rw-r----- to a three-digit octal mode."},{"role":"assistant","content":"640"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0211","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2211: A file has mode 600. The actor uses the group permission bits. Can the actor write the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"DENY; group bits are 0 (---)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0212","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_03","messages":[{"role":"user","content":"Permission scenario 2212: With umask 022, what mode results when a regular file is created from base mode 666?"},{"role":"assistant","content":"644"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0213","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2213: With umask 027, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"750"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0214","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2214: Choose the least-privilege chmod mode for owner read and write; group read and write; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"660; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0215","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2215: Directory mode is 660; evaluate the other class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=false, create_delete=false, traverse=false."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0216","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_07","messages":[{"role":"user","content":"Permission scenario 2216: SSH refuses a private key because group members can read it. What least-privilege chmod command should be applied to ~/.ssh/id_ed25519?"},{"role":"assistant","content":"chmod 600 ~/.ssh/id_ed25519"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0217","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2217: A service only reads customers. Scopes are customers.read, customers.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"customers.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0218","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2218: An API token only fetches calendar data and never modifies it. Permissions are calendar.read, calendar.write and account.admin. Choose the minimum."},{"role":"assistant","content":"calendar.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0219","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_10","messages":[{"role":"user","content":"Permission scenario 2219: In this policy engine, explicit DENY overrides ALLOW. Role analyst grants reports.read. The user also has an explicit ALLOW for reports.read. Is access allowed?"},{"role":"assistant","content":"ALLOW"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0220","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2220: Convert Unix mode 640 to the nine-character symbolic permission string."},{"role":"assistant","content":"rw-r-----"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0221","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2221: Convert symbolic permissions rw------- to a three-digit octal mode."},{"role":"assistant","content":"600"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0222","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2222: A file has mode 644. The actor uses the owner permission bits. Can the actor read the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"ALLOW; owner bits are 6 (rw-)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0225","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2225: Choose the least-privilege chmod mode for owner read and write; group read; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"640; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0226","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2226: Directory mode is 754; evaluate the group class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=false, traverse=true."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0227","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_07","messages":[{"role":"user","content":"Permission scenario 2227: SSH refuses a private key because group members can read it. What least-privilege chmod command should be applied to ~/.ssh/id_ed25519?"},{"role":"assistant","content":"chmod 600 ~/.ssh/id_ed25519"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0228","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2228: A service only reads invoices. Scopes are invoices.read, invoices.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"invoices.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0229","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2229: An API token only fetches billing data and never modifies it. Permissions are billing.read, billing.write and account.admin. Choose the minimum."},{"role":"assistant","content":"billing.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0231","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2231: Convert Unix mode 600 to the nine-character symbolic permission string."},{"role":"assistant","content":"rw-------"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0232","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2232: Convert symbolic permissions rw-r--r-- to a three-digit octal mode."},{"role":"assistant","content":"644"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0233","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2233: A file has mode 750. The actor uses the other permission bits. Can the actor execute the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"DENY; other bits are 0 (---)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0234","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_03","messages":[{"role":"user","content":"Permission scenario 2234: With umask 077, what mode results when a regular file is created from base mode 666?"},{"role":"assistant","content":"600"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0236","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2236: Choose the least-privilege chmod mode for owner all; group read and execute; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"750; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0237","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2237: Directory mode is 740; evaluate the owner class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=true, traverse=true."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0239","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2239: A service only reads projects. Scopes are projects.read, projects.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"projects.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0240","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2240: An API token only fetches repo data and never modifies it. Permissions are repo.read, repo.write and account.admin. Choose the minimum."},{"role":"assistant","content":"repo.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0242","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2242: Convert Unix mode 644 to the nine-character symbolic permission string."},{"role":"assistant","content":"rw-r--r--"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0243","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2243: Convert symbolic permissions rwxr-x--- to a three-digit octal mode."},{"role":"assistant","content":"750"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0244","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2244: A file has mode 700. The actor uses the group permission bits. Can the actor write the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"DENY; group bits are 0 (---)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0245","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_03","messages":[{"role":"user","content":"Permission scenario 2245: With umask 027, what mode results when a regular file is created from base mode 666?"},{"role":"assistant","content":"640"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0246","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2246: With umask 077, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"700"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0247","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2247: Choose the least-privilege chmod mode for owner read and write; group none; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"600; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0248","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2248: Directory mode is 664; evaluate the other class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=false, traverse=false."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0249","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_07","messages":[{"role":"user","content":"Permission scenario 2249: SSH refuses a private key because group members can read it. What least-privilege chmod command should be applied to ~/.ssh/id_ed25519?"},{"role":"assistant","content":"chmod 600 ~/.ssh/id_ed25519"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0250","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2250: A service only reads reports. Scopes are reports.read, reports.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"reports.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0251","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2251: An API token only fetches files data and never modifies it. Permissions are files.read, files.write and account.admin. Choose the minimum."},{"role":"assistant","content":"files.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0253","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2253: Convert Unix mode 750 to the nine-character symbolic permission string."},{"role":"assistant","content":"rwxr-x---"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0254","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2254: Convert symbolic permissions rwx------ to a three-digit octal mode."},{"role":"assistant","content":"700"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0255","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2255: A file has mode 660. The actor uses the owner permission bits. Can the actor read the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"ALLOW; owner bits are 6 (rw-)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0256","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_03","messages":[{"role":"user","content":"Permission scenario 2256: With umask 022, what mode results when a regular file is created from base mode 666?"},{"role":"assistant","content":"644"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0257","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2257: With umask 027, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"750"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0258","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2258: Choose the least-privilege chmod mode for owner all; group all; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"770; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0259","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2259: Directory mode is 770; evaluate the group class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=true, traverse=true."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0260","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_07","messages":[{"role":"user","content":"Permission scenario 2260: SSH refuses a private key because group members can read it. What least-privilege chmod command should be applied to ~/.ssh/id_ed25519?"},{"role":"assistant","content":"chmod 600 ~/.ssh/id_ed25519"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0261","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2261: A service only reads customers. Scopes are customers.read, customers.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"customers.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0262","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2262: An API token only fetches calendar data and never modifies it. Permissions are calendar.read, calendar.write and account.admin. Choose the minimum."},{"role":"assistant","content":"calendar.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0264","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2264: Convert Unix mode 700 to the nine-character symbolic permission string."},{"role":"assistant","content":"rwx------"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0265","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2265: Convert symbolic permissions rw-rw---- to a three-digit octal mode."},{"role":"assistant","content":"660"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0266","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2266: A file has mode 754. The actor uses the other permission bits. Can the actor execute the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"DENY; other bits are 4 (r--)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0267","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_03","messages":[{"role":"user","content":"Permission scenario 2267: With umask 002, what mode results when a regular file is created from base mode 666?"},{"role":"assistant","content":"664"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0268","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2268: With umask 022, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"755"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0269","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2269: Choose the least-privilege chmod mode for owner read and write; group read and write; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"660; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0270","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2270: Directory mode is 640; evaluate the owner class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=false, traverse=false."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0271","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_07","messages":[{"role":"user","content":"Permission scenario 2271: SSH refuses a private key because group members can read it. What least-privilege chmod command should be applied to ~/.ssh/id_ed25519?"},{"role":"assistant","content":"chmod 600 ~/.ssh/id_ed25519"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0272","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2272: A service only reads invoices. Scopes are invoices.read, invoices.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"invoices.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0273","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2273: An API token only fetches billing data and never modifies it. Permissions are billing.read, billing.write and account.admin. Choose the minimum."},{"role":"assistant","content":"billing.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0275","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2275: Convert Unix mode 660 to the nine-character symbolic permission string."},{"role":"assistant","content":"rw-rw----"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0276","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2276: Convert symbolic permissions rwxr-xr-- to a three-digit octal mode."},{"role":"assistant","content":"754"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0277","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2277: A file has mode 740. The actor uses the group permission bits. Can the actor write the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"DENY; group bits are 4 (r--)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0278","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_03","messages":[{"role":"user","content":"Permission scenario 2278: With umask 077, what mode results when a regular file is created from base mode 666?"},{"role":"assistant","content":"600"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0279","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2279: With umask 002, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"775"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0280","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2280: Choose the least-privilege chmod mode for owner read and write; group read; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"640; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0281","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2281: Directory mode is 600; evaluate the other class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=false, create_delete=false, traverse=false."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0282","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_07","messages":[{"role":"user","content":"Permission scenario 2282: SSH refuses a private key because group members can read it. What least-privilege chmod command should be applied to ~/.ssh/id_ed25519?"},{"role":"assistant","content":"chmod 600 ~/.ssh/id_ed25519"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0283","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2283: A service only reads projects. Scopes are projects.read, projects.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"projects.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0284","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2284: An API token only fetches repo data and never modifies it. Permissions are repo.read, repo.write and account.admin. Choose the minimum."},{"role":"assistant","content":"repo.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0286","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2286: Convert Unix mode 754 to the nine-character symbolic permission string."},{"role":"assistant","content":"rwxr-xr--"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0287","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2287: Convert symbolic permissions rwxr----- to a three-digit octal mode."},{"role":"assistant","content":"740"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0288","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2288: A file has mode 664. The actor uses the owner permission bits. Can the actor read the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"ALLOW; owner bits are 6 (rw-)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0289","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_03","messages":[{"role":"user","content":"Permission scenario 2289: With umask 027, what mode results when a regular file is created from base mode 666?"},{"role":"assistant","content":"640"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0290","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2290: With umask 077, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"700"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0291","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2291: Choose the least-privilege chmod mode for owner all; group read and execute; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"750; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0292","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2292: Directory mode is 644; evaluate the group class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=false, traverse=false."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0294","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2294: A service only reads reports. Scopes are reports.read, reports.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"reports.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0295","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2295: An API token only fetches files data and never modifies it. Permissions are files.read, files.write and account.admin. Choose the minimum."},{"role":"assistant","content":"files.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0297","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2297: Convert Unix mode 740 to the nine-character symbolic permission string."},{"role":"assistant","content":"rwxr-----"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0298","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2298: Convert symbolic permissions rw-rw-r-- to a three-digit octal mode."},{"role":"assistant","content":"664"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0299","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2299: A file has mode 770. The actor uses the other permission bits. Can the actor execute the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"DENY; other bits are 0 (---)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0300","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_03","messages":[{"role":"user","content":"Permission scenario 2300: With umask 022, what mode results when a regular file is created from base mode 666?"},{"role":"assistant","content":"644"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0301","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2301: With umask 027, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"750"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0302","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2302: Choose the least-privilege chmod mode for owner read and write; group none; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"600; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0303","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2303: Directory mode is 750; evaluate the owner class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=true, traverse=true."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0304","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_07","messages":[{"role":"user","content":"Permission scenario 2304: SSH refuses a private key because group members can read it. What least-privilege chmod command should be applied to ~/.ssh/id_ed25519?"},{"role":"assistant","content":"chmod 600 ~/.ssh/id_ed25519"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0305","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2305: A service only reads customers. Scopes are customers.read, customers.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"customers.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0306","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2306: An API token only fetches calendar data and never modifies it. Permissions are calendar.read, calendar.write and account.admin. Choose the minimum."},{"role":"assistant","content":"calendar.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0307","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_10","messages":[{"role":"user","content":"Permission scenario 2307: In this policy engine, explicit DENY overrides ALLOW. Role analyst grants reports.read. The user also has an explicit ALLOW for reports.read. Is access allowed?"},{"role":"assistant","content":"ALLOW"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0308","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2308: Convert Unix mode 664 to the nine-character symbolic permission string."},{"role":"assistant","content":"rw-rw-r--"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0309","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2309: Convert symbolic permissions rwxrwx--- to a three-digit octal mode."},{"role":"assistant","content":"770"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0310","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2310: A file has mode 640. The actor uses the group permission bits. Can the actor write the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"DENY; group bits are 4 (r--)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0314","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2314: Directory mode is 700; evaluate the other class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=false, create_delete=false, traverse=false."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0317","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2317: An API token only fetches billing data and never modifies it. Permissions are billing.read, billing.write and account.admin. Choose the minimum."},{"role":"assistant","content":"billing.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0319","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2319: Convert Unix mode 770 to the nine-character symbolic permission string."},{"role":"assistant","content":"rwxrwx---"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0320","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2320: Convert symbolic permissions rw-r----- to a three-digit octal mode."},{"role":"assistant","content":"640"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0321","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2321: A file has mode 600. The actor uses the owner permission bits. Can the actor read the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"ALLOW; owner bits are 6 (rw-)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0325","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2325: Directory mode is 660; evaluate the group class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=false, traverse=false."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0327","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2327: A service only reads projects. Scopes are projects.read, projects.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"projects.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0328","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2328: An API token only fetches repo data and never modifies it. Permissions are repo.read, repo.write and account.admin. Choose the minimum."},{"role":"assistant","content":"repo.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0330","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2330: Convert Unix mode 640 to the nine-character symbolic permission string."},{"role":"assistant","content":"rw-r-----"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0331","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2331: Convert symbolic permissions rw------- to a three-digit octal mode."},{"role":"assistant","content":"600"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0332","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2332: A file has mode 644. The actor uses the other permission bits. Can the actor execute the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"DENY; other bits are 4 (r--)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0335","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2335: Choose the least-privilege chmod mode for owner read and write; group read; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"640; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0336","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2336: Directory mode is 754; evaluate the owner class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=true, traverse=true."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0338","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2338: A service only reads reports. Scopes are reports.read, reports.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"reports.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0339","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2339: An API token only fetches files data and never modifies it. Permissions are files.read, files.write and account.admin. Choose the minimum."},{"role":"assistant","content":"files.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0340","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_10","messages":[{"role":"user","content":"Permission scenario 2340: In this policy engine, explicit DENY overrides ALLOW. Role analyst grants reports.read. The user also has an explicit DENY for reports.read. Is access allowed?"},{"role":"assistant","content":"DENY"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0341","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2341: Convert Unix mode 600 to the nine-character symbolic permission string."},{"role":"assistant","content":"rw-------"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0342","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2342: Convert symbolic permissions rw-r--r-- to a three-digit octal mode."},{"role":"assistant","content":"644"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0343","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2343: A file has mode 750. The actor uses the group permission bits. Can the actor write the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"DENY; group bits are 5 (r-x)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0346","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2346: Choose the least-privilege chmod mode for owner all; group read and execute; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"750; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0347","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2347: Directory mode is 740; evaluate the other class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=false, create_delete=false, traverse=false."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0348","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_07","messages":[{"role":"user","content":"Permission scenario 2348: SSH refuses a private key because group members can read it. What least-privilege chmod command should be applied to ~/.ssh/id_ed25519?"},{"role":"assistant","content":"chmod 600 ~/.ssh/id_ed25519"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0349","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2349: A service only reads customers. Scopes are customers.read, customers.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"customers.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0352","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2352: Convert Unix mode 644 to the nine-character symbolic permission string."},{"role":"assistant","content":"rw-r--r--"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0353","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2353: Convert symbolic permissions rwxr-x--- to a three-digit octal mode."},{"role":"assistant","content":"750"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0360","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2360: A service only reads invoices. Scopes are invoices.read, invoices.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"invoices.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0361","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2361: An API token only fetches billing data and never modifies it. Permissions are billing.read, billing.write and account.admin. Choose the minimum."},{"role":"assistant","content":"billing.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0363","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2363: Convert Unix mode 750 to the nine-character symbolic permission string."},{"role":"assistant","content":"rwxr-x---"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0364","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2364: Convert symbolic permissions rwx------ to a three-digit octal mode."},{"role":"assistant","content":"700"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0365","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2365: A file has mode 660. The actor uses the other permission bits. Can the actor execute the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"DENY; other bits are 0 (---)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0368","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2368: Choose the least-privilege chmod mode for owner all; group all; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"770; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0369","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2369: Directory mode is 770; evaluate the owner class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=true, traverse=true."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0370","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_07","messages":[{"role":"user","content":"Permission scenario 2370: SSH refuses a private key because group members can read it. What least-privilege chmod command should be applied to ~/.ssh/id_ed25519?"},{"role":"assistant","content":"chmod 600 ~/.ssh/id_ed25519"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0371","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2371: A service only reads projects. Scopes are projects.read, projects.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"projects.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0372","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2372: An API token only fetches repo data and never modifies it. Permissions are repo.read, repo.write and account.admin. Choose the minimum."},{"role":"assistant","content":"repo.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0374","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2374: Convert Unix mode 700 to the nine-character symbolic permission string."},{"role":"assistant","content":"rwx------"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0375","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2375: Convert symbolic permissions rw-rw---- to a three-digit octal mode."},{"role":"assistant","content":"660"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0376","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2376: A file has mode 754. The actor uses the group permission bits. Can the actor write the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"DENY; group bits are 5 (r-x)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0380","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2380: Directory mode is 640; evaluate the other class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=false, create_delete=false, traverse=false."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0381","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_07","messages":[{"role":"user","content":"Permission scenario 2381: SSH refuses a private key because group members can read it. What least-privilege chmod command should be applied to ~/.ssh/id_ed25519?"},{"role":"assistant","content":"chmod 600 ~/.ssh/id_ed25519"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0382","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2382: A service only reads reports. Scopes are reports.read, reports.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"reports.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0383","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2383: An API token only fetches files data and never modifies it. Permissions are files.read, files.write and account.admin. Choose the minimum."},{"role":"assistant","content":"files.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0385","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2385: Convert Unix mode 660 to the nine-character symbolic permission string."},{"role":"assistant","content":"rw-rw----"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0386","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2386: Convert symbolic permissions rwxr-xr-- to a three-digit octal mode."},{"role":"assistant","content":"754"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0387","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2387: A file has mode 740. The actor uses the owner permission bits. Can the actor read the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"ALLOW; owner bits are 7 (rwx)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0388","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_03","messages":[{"role":"user","content":"Permission scenario 2388: With umask 022, what mode results when a regular file is created from base mode 666?"},{"role":"assistant","content":"644"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0389","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2389: With umask 027, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"750"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0390","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2390: Choose the least-privilege chmod mode for owner read and write; group read; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"640; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0391","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2391: Directory mode is 600; evaluate the group class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=false, create_delete=false, traverse=false."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0392","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_07","messages":[{"role":"user","content":"Permission scenario 2392: SSH refuses a private key because group members can read it. What least-privilege chmod command should be applied to ~/.ssh/id_ed25519?"},{"role":"assistant","content":"chmod 600 ~/.ssh/id_ed25519"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0393","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2393: A service only reads customers. Scopes are customers.read, customers.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"customers.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0394","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2394: An API token only fetches calendar data and never modifies it. Permissions are calendar.read, calendar.write and account.admin. Choose the minimum."},{"role":"assistant","content":"calendar.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0396","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2396: Convert Unix mode 754 to the nine-character symbolic permission string."},{"role":"assistant","content":"rwxr-xr--"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0397","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2397: Convert symbolic permissions rwxr----- to a three-digit octal mode."},{"role":"assistant","content":"740"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0398","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2398: A file has mode 664. The actor uses the other permission bits. Can the actor execute the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"DENY; other bits are 4 (r--)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0399","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_03","messages":[{"role":"user","content":"Permission scenario 2399: With umask 002, what mode results when a regular file is created from base mode 666?"},{"role":"assistant","content":"664"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0400","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2400: With umask 022, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"755"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0401","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2401: Choose the least-privilege chmod mode for owner all; group read and execute; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"750; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0402","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2402: Directory mode is 644; evaluate the owner class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=false, traverse=false."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0403","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_07","messages":[{"role":"user","content":"Permission scenario 2403: SSH refuses a private key because group members can read it. What least-privilege chmod command should be applied to ~/.ssh/id_ed25519?"},{"role":"assistant","content":"chmod 600 ~/.ssh/id_ed25519"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0404","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2404: A service only reads invoices. Scopes are invoices.read, invoices.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"invoices.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0405","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2405: An API token only fetches billing data and never modifies it. Permissions are billing.read, billing.write and account.admin. Choose the minimum."},{"role":"assistant","content":"billing.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0407","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2407: Convert Unix mode 740 to the nine-character symbolic permission string."},{"role":"assistant","content":"rwxr-----"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0408","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2408: Convert symbolic permissions rw-rw-r-- to a three-digit octal mode."},{"role":"assistant","content":"664"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0409","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2409: A file has mode 770. The actor uses the group permission bits. Can the actor write the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"ALLOW; group bits are 7 (rwx)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0415","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2415: A service only reads projects. Scopes are projects.read, projects.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"projects.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0416","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2416: An API token only fetches repo data and never modifies it. Permissions are repo.read, repo.write and account.admin. Choose the minimum."},{"role":"assistant","content":"repo.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0418","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2418: Convert Unix mode 664 to the nine-character symbolic permission string."},{"role":"assistant","content":"rw-rw-r--"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0419","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2419: Convert symbolic permissions rwxrwx--- to a three-digit octal mode."},{"role":"assistant","content":"770"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0420","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2420: A file has mode 640. The actor uses the owner permission bits. Can the actor read the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"ALLOW; owner bits are 6 (rw-)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0423","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2423: Choose the least-privilege chmod mode for owner all; group all; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"770; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0426","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2426: A service only reads reports. Scopes are reports.read, reports.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"reports.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0427","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2427: An API token only fetches files data and never modifies it. Permissions are files.read, files.write and account.admin. Choose the minimum."},{"role":"assistant","content":"files.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0429","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2429: Convert Unix mode 770 to the nine-character symbolic permission string."},{"role":"assistant","content":"rwxrwx---"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0430","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2430: Convert symbolic permissions rw-r----- to a three-digit octal mode."},{"role":"assistant","content":"640"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0431","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2431: A file has mode 600. The actor uses the other permission bits. Can the actor execute the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"DENY; other bits are 0 (---)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0433","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2433: With umask 027, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"750"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0435","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2435: Directory mode is 660; evaluate the owner class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=false, traverse=false."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0437","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2437: A service only reads customers. Scopes are customers.read, customers.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"customers.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0438","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2438: An API token only fetches calendar data and never modifies it. Permissions are calendar.read, calendar.write and account.admin. Choose the minimum."},{"role":"assistant","content":"calendar.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0440","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2440: Convert Unix mode 640 to the nine-character symbolic permission string."},{"role":"assistant","content":"rw-r-----"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0441","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2441: Convert symbolic permissions rw------- to a three-digit octal mode."},{"role":"assistant","content":"600"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0442","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2442: A file has mode 644. The actor uses the group permission bits. Can the actor write the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"DENY; group bits are 4 (r--)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0445","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2445: Choose the least-privilege chmod mode for owner read and write; group read; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"640; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0446","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2446: Directory mode is 754; evaluate the other class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=false, traverse=false."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0449","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2449: An API token only fetches billing data and never modifies it. Permissions are billing.read, billing.write and account.admin. Choose the minimum."},{"role":"assistant","content":"billing.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0451","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2451: Convert Unix mode 600 to the nine-character symbolic permission string."},{"role":"assistant","content":"rw-------"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0452","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2452: Convert symbolic permissions rw-r--r-- to a three-digit octal mode."},{"role":"assistant","content":"644"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0453","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2453: A file has mode 750. The actor uses the owner permission bits. Can the actor read the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"ALLOW; owner bits are 7 (rwx)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0456","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2456: Choose the least-privilege chmod mode for owner all; group read and execute; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"750; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0457","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2457: Directory mode is 740; evaluate the group class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=false, traverse=false."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0459","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2459: A service only reads projects. Scopes are projects.read, projects.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"projects.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0460","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2460: An API token only fetches repo data and never modifies it. Permissions are repo.read, repo.write and account.admin. Choose the minimum."},{"role":"assistant","content":"repo.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0462","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2462: Convert Unix mode 644 to the nine-character symbolic permission string."},{"role":"assistant","content":"rw-r--r--"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0463","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2463: Convert symbolic permissions rwxr-x--- to a three-digit octal mode."},{"role":"assistant","content":"750"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0466","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2466: With umask 077, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"700"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0467","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2467: Choose the least-privilege chmod mode for owner read and write; group none; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"600; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0468","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2468: Directory mode is 664; evaluate the owner class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=false, traverse=false."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0469","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_07","messages":[{"role":"user","content":"Permission scenario 2469: SSH refuses a private key because group members can read it. What least-privilege chmod command should be applied to ~/.ssh/id_ed25519?"},{"role":"assistant","content":"chmod 600 ~/.ssh/id_ed25519"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0470","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2470: A service only reads reports. Scopes are reports.read, reports.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"reports.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0471","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2471: An API token only fetches files data and never modifies it. Permissions are files.read, files.write and account.admin. Choose the minimum."},{"role":"assistant","content":"files.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0473","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2473: Convert Unix mode 750 to the nine-character symbolic permission string."},{"role":"assistant","content":"rwxr-x---"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0474","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2474: Convert symbolic permissions rwx------ to a three-digit octal mode."},{"role":"assistant","content":"700"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0478","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2478: Choose the least-privilege chmod mode for owner all; group all; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"770; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0480","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_07","messages":[{"role":"user","content":"Permission scenario 2480: SSH refuses a private key because group members can read it. What least-privilege chmod command should be applied to ~/.ssh/id_ed25519?"},{"role":"assistant","content":"chmod 600 ~/.ssh/id_ed25519"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0481","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2481: A service only reads customers. Scopes are customers.read, customers.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"customers.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0482","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2482: An API token only fetches calendar data and never modifies it. Permissions are calendar.read, calendar.write and account.admin. Choose the minimum."},{"role":"assistant","content":"calendar.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0484","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2484: Convert Unix mode 700 to the nine-character symbolic permission string."},{"role":"assistant","content":"rwx------"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0485","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2485: Convert symbolic permissions rw-rw---- to a three-digit octal mode."},{"role":"assistant","content":"660"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0486","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2486: A file has mode 754. The actor uses the owner permission bits. Can the actor read the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"ALLOW; owner bits are 7 (rwx)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0487","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_03","messages":[{"role":"user","content":"Permission scenario 2487: With umask 002, what mode results when a regular file is created from base mode 666?"},{"role":"assistant","content":"664"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0488","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2488: With umask 022, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"755"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0489","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2489: Choose the least-privilege chmod mode for owner read and write; group read and write; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"660; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0490","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2490: Directory mode is 640; evaluate the group class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=false, traverse=false."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0491","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_07","messages":[{"role":"user","content":"Permission scenario 2491: SSH refuses a private key because group members can read it. What least-privilege chmod command should be applied to ~/.ssh/id_ed25519?"},{"role":"assistant","content":"chmod 600 ~/.ssh/id_ed25519"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0492","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2492: A service only reads invoices. Scopes are invoices.read, invoices.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"invoices.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0493","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2493: An API token only fetches billing data and never modifies it. Permissions are billing.read, billing.write and account.admin. Choose the minimum."},{"role":"assistant","content":"billing.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0495","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2495: Convert Unix mode 660 to the nine-character symbolic permission string."},{"role":"assistant","content":"rw-rw----"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0496","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2496: Convert symbolic permissions rwxr-xr-- to a three-digit octal mode."},{"role":"assistant","content":"754"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0499","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2499: With umask 002, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"775"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0500","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2500: Choose the least-privilege chmod mode for owner read and write; group read; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"640; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0501","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2501: Directory mode is 600; evaluate the owner class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=false, traverse=false."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0503","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2503: A service only reads projects. Scopes are projects.read, projects.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"projects.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0504","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2504: An API token only fetches repo data and never modifies it. Permissions are repo.read, repo.write and account.admin. Choose the minimum."},{"role":"assistant","content":"repo.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0506","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2506: Convert Unix mode 754 to the nine-character symbolic permission string."},{"role":"assistant","content":"rwxr-xr--"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0507","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2507: Convert symbolic permissions rwxr----- to a three-digit octal mode."},{"role":"assistant","content":"740"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0508","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2508: A file has mode 664. The actor uses the group permission bits. Can the actor write the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"ALLOW; group bits are 6 (rw-)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0510","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2510: With umask 077, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"700"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0511","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2511: Choose the least-privilege chmod mode for owner all; group read and execute; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"750; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0512","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2512: Directory mode is 644; evaluate the other class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=false, traverse=false."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0513","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_07","messages":[{"role":"user","content":"Permission scenario 2513: SSH refuses a private key because group members can read it. What least-privilege chmod command should be applied to ~/.ssh/id_ed25519?"},{"role":"assistant","content":"chmod 600 ~/.ssh/id_ed25519"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0514","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2514: A service only reads reports. Scopes are reports.read, reports.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"reports.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0515","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2515: An API token only fetches files data and never modifies it. Permissions are files.read, files.write and account.admin. Choose the minimum."},{"role":"assistant","content":"files.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0517","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2517: Convert Unix mode 740 to the nine-character symbolic permission string."},{"role":"assistant","content":"rwxr-----"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0518","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2518: Convert symbolic permissions rw-rw-r-- to a three-digit octal mode."},{"role":"assistant","content":"664"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0519","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2519: A file has mode 770. The actor uses the owner permission bits. Can the actor read the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"ALLOW; owner bits are 7 (rwx)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0520","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_03","messages":[{"role":"user","content":"Permission scenario 2520: With umask 022, what mode results when a regular file is created from base mode 666?"},{"role":"assistant","content":"644"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0521","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2521: With umask 027, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"750"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0522","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2522: Choose the least-privilege chmod mode for owner read and write; group none; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"600; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0523","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2523: Directory mode is 750; evaluate the group class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=false, traverse=true."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0524","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_07","messages":[{"role":"user","content":"Permission scenario 2524: SSH refuses a private key because group members can read it. What least-privilege chmod command should be applied to ~/.ssh/id_ed25519?"},{"role":"assistant","content":"chmod 600 ~/.ssh/id_ed25519"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0525","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2525: A service only reads customers. Scopes are customers.read, customers.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"customers.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0526","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2526: An API token only fetches calendar data and never modifies it. Permissions are calendar.read, calendar.write and account.admin. Choose the minimum."},{"role":"assistant","content":"calendar.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0528","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2528: Convert Unix mode 664 to the nine-character symbolic permission string."},{"role":"assistant","content":"rw-rw-r--"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0529","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2529: Convert symbolic permissions rwxrwx--- to a three-digit octal mode."},{"role":"assistant","content":"770"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0530","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2530: A file has mode 640. The actor uses the other permission bits. Can the actor execute the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"DENY; other bits are 0 (---)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0531","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_03","messages":[{"role":"user","content":"Permission scenario 2531: With umask 002, what mode results when a regular file is created from base mode 666?"},{"role":"assistant","content":"664"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0532","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2532: With umask 022, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"755"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0533","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2533: Choose the least-privilege chmod mode for owner all; group all; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"770; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0534","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2534: Directory mode is 700; evaluate the owner class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=true, traverse=true."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0535","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_07","messages":[{"role":"user","content":"Permission scenario 2535: SSH refuses a private key because group members can read it. What least-privilege chmod command should be applied to ~/.ssh/id_ed25519?"},{"role":"assistant","content":"chmod 600 ~/.ssh/id_ed25519"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0536","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2536: A service only reads invoices. Scopes are invoices.read, invoices.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"invoices.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0537","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2537: An API token only fetches billing data and never modifies it. Permissions are billing.read, billing.write and account.admin. Choose the minimum."},{"role":"assistant","content":"billing.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0539","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2539: Convert Unix mode 770 to the nine-character symbolic permission string."},{"role":"assistant","content":"rwxrwx---"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0540","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2540: Convert symbolic permissions rw-r----- to a three-digit octal mode."},{"role":"assistant","content":"640"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0541","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2541: A file has mode 600. The actor uses the group permission bits. Can the actor write the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"DENY; group bits are 0 (---)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0542","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_03","messages":[{"role":"user","content":"Permission scenario 2542: With umask 077, what mode results when a regular file is created from base mode 666?"},{"role":"assistant","content":"600"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0543","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2543: With umask 002, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"775"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0544","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2544: Choose the least-privilege chmod mode for owner read and write; group read and write; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"660; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0545","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2545: Directory mode is 660; evaluate the other class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=false, create_delete=false, traverse=false."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0546","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_07","messages":[{"role":"user","content":"Permission scenario 2546: SSH refuses a private key because group members can read it. What least-privilege chmod command should be applied to ~/.ssh/id_ed25519?"},{"role":"assistant","content":"chmod 600 ~/.ssh/id_ed25519"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0547","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2547: A service only reads projects. Scopes are projects.read, projects.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"projects.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0548","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2548: An API token only fetches repo data and never modifies it. Permissions are repo.read, repo.write and account.admin. Choose the minimum."},{"role":"assistant","content":"repo.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0549","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_10","messages":[{"role":"user","content":"Permission scenario 2549: In this policy engine, explicit DENY overrides ALLOW. Role analyst grants reports.read. The user also has an explicit ALLOW for reports.read. Is access allowed?"},{"role":"assistant","content":"ALLOW"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0550","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2550: Convert Unix mode 640 to the nine-character symbolic permission string."},{"role":"assistant","content":"rw-r-----"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0551","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2551: Convert symbolic permissions rw------- to a three-digit octal mode."},{"role":"assistant","content":"600"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0552","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2552: A file has mode 644. The actor uses the owner permission bits. Can the actor read the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"ALLOW; owner bits are 6 (rw-)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0553","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_03","messages":[{"role":"user","content":"Permission scenario 2553: With umask 027, what mode results when a regular file is created from base mode 666?"},{"role":"assistant","content":"640"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0554","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2554: With umask 077, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"700"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0555","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2555: Choose the least-privilege chmod mode for owner read and write; group read; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"640; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0556","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2556: Directory mode is 754; evaluate the group class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=false, traverse=true."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0557","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_07","messages":[{"role":"user","content":"Permission scenario 2557: SSH refuses a private key because group members can read it. What least-privilege chmod command should be applied to ~/.ssh/id_ed25519?"},{"role":"assistant","content":"chmod 600 ~/.ssh/id_ed25519"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0558","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2558: A service only reads reports. Scopes are reports.read, reports.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"reports.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0559","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2559: An API token only fetches files data and never modifies it. Permissions are files.read, files.write and account.admin. Choose the minimum."},{"role":"assistant","content":"files.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0560","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_10","messages":[{"role":"user","content":"Permission scenario 2560: In this policy engine, explicit DENY overrides ALLOW. Role analyst grants reports.read. The user also has an explicit DENY for reports.read. Is access allowed?"},{"role":"assistant","content":"DENY"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0561","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2561: Convert Unix mode 600 to the nine-character symbolic permission string."},{"role":"assistant","content":"rw-------"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0562","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2562: Convert symbolic permissions rw-r--r-- to a three-digit octal mode."},{"role":"assistant","content":"644"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0563","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2563: A file has mode 750. The actor uses the other permission bits. Can the actor execute the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"DENY; other bits are 0 (---)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0564","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_03","messages":[{"role":"user","content":"Permission scenario 2564: With umask 022, what mode results when a regular file is created from base mode 666?"},{"role":"assistant","content":"644"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0565","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2565: With umask 027, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"750"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0566","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2566: Choose the least-privilege chmod mode for owner all; group read and execute; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"750; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0567","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2567: Directory mode is 740; evaluate the owner class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=true, traverse=true."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0568","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_07","messages":[{"role":"user","content":"Permission scenario 2568: SSH refuses a private key because group members can read it. What least-privilege chmod command should be applied to ~/.ssh/id_ed25519?"},{"role":"assistant","content":"chmod 600 ~/.ssh/id_ed25519"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0569","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2569: A service only reads customers. Scopes are customers.read, customers.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"customers.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0570","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2570: An API token only fetches calendar data and never modifies it. Permissions are calendar.read, calendar.write and account.admin. Choose the minimum."},{"role":"assistant","content":"calendar.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0572","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2572: Convert Unix mode 644 to the nine-character symbolic permission string."},{"role":"assistant","content":"rw-r--r--"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0573","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2573: Convert symbolic permissions rwxr-x--- to a three-digit octal mode."},{"role":"assistant","content":"750"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0574","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2574: A file has mode 700. The actor uses the group permission bits. Can the actor write the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"DENY; group bits are 0 (---)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0575","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_03","messages":[{"role":"user","content":"Permission scenario 2575: With umask 002, what mode results when a regular file is created from base mode 666?"},{"role":"assistant","content":"664"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0576","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2576: With umask 022, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"755"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0577","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2577: Choose the least-privilege chmod mode for owner read and write; group none; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"600; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0578","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_06","messages":[{"role":"user","content":"Permission scenario 2578: Directory mode is 664; evaluate the other class. Report list, create_delete and traverse as true or false using Unix directory semantics."},{"role":"assistant","content":"list=true, create_delete=false, traverse=false."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0579","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_07","messages":[{"role":"user","content":"Permission scenario 2579: SSH refuses a private key because group members can read it. What least-privilege chmod command should be applied to ~/.ssh/id_ed25519?"},{"role":"assistant","content":"chmod 600 ~/.ssh/id_ed25519"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0580","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2580: A service only reads invoices. Scopes are invoices.read, invoices.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"invoices.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0581","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2581: An API token only fetches billing data and never modifies it. Permissions are billing.read, billing.write and account.admin. Choose the minimum."},{"role":"assistant","content":"billing.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0583","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2583: Convert Unix mode 750 to the nine-character symbolic permission string."},{"role":"assistant","content":"rwxr-x---"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0584","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2584: Convert symbolic permissions rwx------ to a three-digit octal mode."},{"role":"assistant","content":"700"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0585","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2585: A file has mode 660. The actor uses the owner permission bits. Can the actor read the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"ALLOW; owner bits are 6 (rw-)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0586","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_03","messages":[{"role":"user","content":"Permission scenario 2586: With umask 077, what mode results when a regular file is created from base mode 666?"},{"role":"assistant","content":"600"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0587","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2587: With umask 002, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"775"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0588","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2588: Choose the least-privilege chmod mode for owner all; group all; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"770; it grants exactly the stated owner, group and other rights."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0590","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_07","messages":[{"role":"user","content":"Permission scenario 2590: SSH refuses a private key because group members can read it. What least-privilege chmod command should be applied to ~/.ssh/id_ed25519?"},{"role":"assistant","content":"chmod 600 ~/.ssh/id_ed25519"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0591","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_08","messages":[{"role":"user","content":"Permission scenario 2591: A service only reads projects. Scopes are projects.read, projects.write, admin and profile. Which single scope follows least privilege?"},{"role":"assistant","content":"projects.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0592","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_09","messages":[{"role":"user","content":"Permission scenario 2592: An API token only fetches repo data and never modifies it. Permissions are repo.read, repo.write and account.admin. Choose the minimum."},{"role":"assistant","content":"repo.read"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0594","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_00","messages":[{"role":"user","content":"Permission scenario 2594: Convert Unix mode 700 to the nine-character symbolic permission string."},{"role":"assistant","content":"rwx------"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0595","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_01","messages":[{"role":"user","content":"Permission scenario 2595: Convert symbolic permissions rw-rw---- to a three-digit octal mode."},{"role":"assistant","content":"660"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0596","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_02","messages":[{"role":"user","content":"Permission scenario 2596: A file has mode 754. The actor uses the other permission bits. Can the actor execute the file? Answer ALLOW or DENY and identify the controlling bits."},{"role":"assistant","content":"DENY; other bits are 4 (r--)."}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0597","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_03","messages":[{"role":"user","content":"Permission scenario 2597: With umask 027, what mode results when a regular file is created from base mode 666?"},{"role":"assistant","content":"640"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0598","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_04","messages":[{"role":"user","content":"Permission scenario 2598: With umask 077, what mode results when a directory is created from base mode 777?"},{"role":"assistant","content":"700"}]}
{"source":"STATICAI synthetic security and permissions curriculum","source_record_id":"perm-0599","source_revision":"STATICAI_SYNTHETIC_V1_2026-10-19","license":"staticai-proprietary","training_eligible":true,"training_profile":"research","commercial_eligible":true,"synthetic_rule_version":"advanced-gapfill-v1","generation_family":"permissions_05","messages":[{"role":"user","content":"Permission scenario 2599: Choose the least-privilege chmod mode for owner read and write; group read and write; others none. Give the octal mode and a short reason."},{"role":"assistant","content":"660; it grants exactly the stated owner, group and other rights."}]}

Xet Storage Details

Size:
283 kB
·
Xet hash:
b126c1b220aa3d86abdc1158bd3b4edfb00e5692edceb6e8d299409bb36ab91e

Xet efficiently stores files, intelligently splitting them into unique chunks and accelerating uploads and downloads. More info.