Ryoto Miyamoto

Policy-Conditioned Constrained Decoding for Column-Level Access Control in Text-to-SQL

A per-token logits mask is applied that deterministically eliminates single-query column-use violations on the supported SQL fragment in a single decoding pass and achieves 0% Leakage Rate and Coverage up to 88.7% on Spider-CU, while staying within +10% tokens of direct prompting.