Abstract: Disclosed are examples of systems, apparatus, methods and computer program products for correlating security policy inputs and outputs. A server system can obtain a system input comprising two versions of a policy input and corresponding versions of a policy output. The system can compute differences between the versions of the policy input and the versions of the policy output. The system can then correlate input differences to output differences. The system can generate and store a database record identifying the correlation.

Abstract: Execution of client code in a shared infrastructure comprises instantiating a container manager to manage containers and routers configured to receive calls requesting execution of the client code. The container manager pre-initializes a plurality of containers and registered the containers in a database to indicate that the plurality of containers are available. A router receives a call to execute the client code and selects an available first container identified in the database. The call is routed to the selected container and the status of the container is updated to in-use to prevent another router from selecting the container. Responsive to the selected container processing the call, the router receives a response from the container and returns the response to the caller. The containers then marked for deletion in the database. The container manager then deletes any of the containers marked for deletion to prevent the containers from processing subsequent calls.

Abstract: Disclosed are examples of systems, apparatus, methods and computer program products providing network security orchestration and management across different clouds. In some implementations, network security information includes a set of security policies indicating permitted communications between or among computing resources. The network security information is converted to a cloud-independent representation. From the cloud-independent representation, policy sets can be generated, where each policy set is specific to a different cloud.

Abstract: In some embodiments, a method receives a label for a record in a database. A first operation is performed using a first value associated with the record to generate a first reporting object for a sustainability metric that is based on a resource. A second value for the first reporting object is generated based on performing the first operation using respective first values associated with first records based on a relationship in a data model to a first reporting object. The method uses the label to perform a second operation using the first value associated with the record to generate a third value for a second reporting object for the sustainability metric. The second reporting object is generated based on performing the second operation using respective first values associated with second records that are associated with the label.

Abstract: Methods, apparatuses, and computer-program products are disclosed. The method may include deploying a runtime agent onto a private compute architecture for running one or more federated application programming interfaces (APIs) on the private compute architecture. The method may include receiving, via a user interface of a federation management service, user input to manage an operation of the one or more federated APIs, where the federation management service is hosted on public cloud-based resources. The method may include communicating, based on the user input, control signaling between the runtime agent and a runtime manager that is hosted on a control plane of the federation management service in the public cloud-based resources.

Abstract: Embodiments described herein provide a pipelined natural language question answering system that improves a BERT-based system. Specifically, the natural language question answering system uses a pipeline of neural networks each trained to perform a particular task. The context selection network identifies premium context from context for the question. The question type network identifies the natural language question as a yes, no, or span question and a yes or no answer to the natural language question when the question is a yes or no question. The span extraction model determines an answer span to the natural language question when the question is a span question.

Abstract: In some embodiments, a method selects a set of fields for a record in a database system. A set of prompt templates is retrieved that is associated with the set of fields. A prompt template comprises text and a variable. The method searches information that is associated with the record to determine context information and inserts the context information into the prompt templates to generate a set of prompts. The set of prompts is input into a generative model to output a generated result. The generative model is trained to output text based on prompts. The method outputs enrichment data for the record on an interface, wherein the enrichment data is based on the text of the generated result.

Abstract: Database systems and methods are provided for initiating an action at a database system by an instance of a native application at a client device coupled to the database system over a network. One method involves a service associated with a field service application at a client device monitoring a location of the client device to determine the location satisfies update criteria including a field of a data record associated with a service appointment when the location is within a threshold distance of a value for the field of the data record corresponding to an address for the service appointment. The service automatically provides an indication to automatically update a status field of the data record associated with the service appointment at the database system in accordance with a configuration associated with the instance of the field service application when the location of the client device satisfies the update criteria.

Abstract: Disclosed herein are system, method, and device embodiments for programmatically generating and deploying an integration application based on a natural language request without requiring any coding by a user. The application generator infers the sources, targets, connectors, operations, entities, and data mappings needed to build the requested integration application. An exposed web service or API may receive natural language input, determine the meaning of the request, and generates and deploys the resulting integration application without requiring any coding by a user.

Abstract: A method and apparatus for collecting and supporting querying of multi-dimensional data pertaining to usage of software and/or hardware to service tenant requests in a multi-tenant cloud computing system where the multi-dimensional data is initially captured on a per request basis and recorded in objects of a first type that store data pertaining to a specific request, specific tenant, specific host and specific time. The objects of the first type are combined by time windows to form objects of a second type. The objects of a second type are stored in another system as separate text files. Responsive to a query for multi-dimensional data for a specific tenant that spans an interval of multiple time windows, the objects of the second type for the specific tenant and time interval are combined across all hosts to generate a query result, and the query result is returned.

Abstract: Techniques for modifying a period of time that data, associated with a characteristic, transmitted via a communication platform is retained are described. A data retention rule can include a first period of time for retaining data transmitted via the communication platform, in association with an organization. The first user can additionally establish a specific data retention rule associated with data associated with a particular characteristic. The specific data retention rule can include an instruction to store communications including the particular characteristic for a second time period that is different from the first time period associated with the data retention rule. The communication platform can receive data from a second user computing device associated with the second user of the organization. Based on a determination that the data is associated with the characteristic, the communication platform can store the data according to the data retention rule specified for such data.

Abstract: A method for using a neural network to generate an improved graph model includes receiving, by the neural network, a graph model. The graph model is based on data relating to an environment for allocating resources to a first group and a second group. The method further includes receiving, by the neural network, a budget for editing the graph model based on a cost of corresponding modification to the environment, and determining, by the neural network, a fairness representation based on a fairness requirement between the first and second groups. It is determined by the neural network, a utility function for the graph model based on first and second group utilities representing resource allocation to the first and second groups respectively. Reinforcement learning is performed on the neural network to generate the improved graph model using the utility function and the fairness representation.

Abstract: A computing device receives a first user interaction with a graphical user interface (GUI) of the computing device. In response to the user interaction, the device sends, to a server system, a request for data corresponding to a first component of the GUI. The device initializes the first component concurrently with the sending. The device receives, from the server system, the data corresponding to the first component and corresponding metadata for the first component. The device generates the first component based on the corresponding metadata and at least a first subset of the received data and displays the first component in a first portion of the GUI. Concurrently with the generating and displaying, the device generates a second component of the GUI based on at least a second subset of the received data, and displays the second component simultaneously with the first component.

Abstract: Disclosed herein are system, method, and computer program product embodiments for automatically generating unique icons for applications on an application exchange platform based on application property representations. An automatic icon generation tool receives a selection of an application on the application exchange platform. The application includes one or more properties. A property representation is determined for the application based on the one or more properties of the application. A unique icon is generated for the application based on the property representation. The unique icon includes one or more characteristics and a characteristic of the one or more characteristics of the unique icon corresponds to a part of the property representation. The unique icon is displayed for the application on the application exchange platform.

Abstract: Methods, systems, and devices for data processing are described. The method may include generating a federated application programming interface (API) from a plurality of data sources. One or more of the plurality of data sources may include an annotated data schema that defines one or more API endpoints for performing a distributed mutation of the plurality of data sources according to a supported distributed transaction protocol. The method may include receiving, via a single call to a single field of the federated API, a request at the federated API to perform a distributed mutation on the plurality of data sources. The method may include orchestrating, via a federation management service and the one or more API endpoints, a plurality of mutation calls to the plurality of data sources according to the distributed transaction protocol.

Abstract: Systems, device and techniques are disclosed for controlling location-based features with usage maps. An application running on a device may receive a current location of the device. The application may determine a sector of a usage map that corresponds to the current location of the device. The usage map may be associated with the application and he usage map may include a map of a geographic area divided into sectors. The application may modify the operation of a remote API call of the application based on the sector of the usage map that corresponds to the current location of the device by disabling or rate-limiting the remote API call.

Abstract: Embodiments described herein provide a cross-lingual sentence alignment framework that is trained only on rich-resource language pairs. To obtain an accurate aligner, a pretrained multi-lingual language model is used, and a classifier is trained on parallel data from rich-resource language pairs. This trained classifier may then be used for cross-lingual transfer with low-resource languages.

Abstract: Media, methods, and systems are disclosed for contextual discovery and design of application workflow. An event message associated with a user interface control and with an instance of an event is displayed in a communication channel of a group-based communications system. In response to detecting an actuation, by a user, of the user interface control associated with the event message, a workflow creation interface is displayed to configure a new workflow triggered by an instance of an event associated with the event message. Inputs are received from the user, such that the inputs are associated with one or more user-created workflow operations. In response to detecting a triggering event corresponding to the new workflow, the new workflow is executed to carry out the user-created workflow operations.

Abstract: Techniques are disclosed relating to the distribution of database key permissions. A database system may distribute first permission information to a plurality of database nodes that identifies a distribution of key range permissions to ones of the plurality of database nodes. A given key range permission being distributed to a given database node may permit that database node to write records whose keys fall within a key range associated with the given key range permission. The database system may receive, from a first database node, a request for a first key range permission provisioned to a second database node. The database system may modify the first permission information to derive second permission information that provisions the first key range permission to the first database node instead of the second database node. The database system may distribute the second permission information to ones of the plurality of database nodes.

Abstract: Implementation of a guided rules editor comprises displaying a view of a user interface (UI) of the guided rules editor to a user on the client device. Metadata of an organization to which the user belongs is fetched and used to identify which data of the organization is eligible for rule creation and attributes of the metadata are used to determine a layout of the one or more UI selection elements. One or more UI selection elements are rendered in one or more positions in the view on a display screen according to the layout and at least a portion of the one or more UI selection elements are populated with the data of the organization. Responsive to receiving user input of the one or more UI selection elements, an organization-specific rule is generated and saved to a data repository for execution by a rules engine after rule compilation.