Does Runtime Topology Context Improve LLM-Generated Kubernetes Security Patches?
Live topology context lifted correctness on dependency-sensitive Kubernetes fixes from 11.1% to 78.0% in the paper’s trials.
Farooq Shaikh introduces KuTIE, which feeds LLM patch generation with Istio call edges, Trivy KSPM findings, and relevant service-account bindings. The evaluation uses a 36-deployment healthcare test cluster with 31 injectable findings across seven dependency classes. The reported gain holds across every tested model and six of seven classes, while a topology-independent control shows no improvement. ArXiv · AI/CL/LG's note
Farooq Shaikh introduces KuTIE, which feeds LLM patch generation with Istio call edges, Trivy KSPM findings, and relevant service-account bindings. The evaluation uses a 36-deployment healthcare test cluster with 31 injectable findings across seven dependency classes. The reported gain holds across every tested model and six of seven classes, while a topology-independent control shows no improvement. ArXiv · AI/CL/LG's note
score 4