Abstract: Methods and apparatus for updating a denormalized database object after updating, deleting, or inserting a record in a source database object are described. A first operation on a source database object that involves a record of the source database object being updated, deleted, or inserted is performed. A first part of a corresponding second operation involving a respective record of the denormalized database object being updated, deleted, or inserted is performed. A query result that references an aggregate field of a set of records in the denormalized database object is altered. The altering includes an aggregation operation using values in the query result being performed and altering that part of the query result that includes the aggregate field of the set of records. A second part is optionally performed to complete the corresponding second operation and update the denormalized database object.

Abstract: Embodiments described herein provide a pipelined natural language question answering system that improves a BERT-based system. Specifically, the natural language question answering system uses a pipeline of neural networks each trained to perform a particular task. The context selection network identifies premium context from context for the question. The question type network identifies the natural language question as a yes, no, or span question and a yes or no answer to the natural language question when the question is a yes or no question. The span extraction model determines an answer span to the natural language question when the question is a span question.

Abstract: To deliver up-to-date, coherent user data to applications upon request, the disclosed technology includes systems and methods for caching data and metadata after it has been synchronously loaded—for future retrieval with a page load time close to zero milliseconds. To provide this experience, data needs to be stored as locally to a user as possible, in the cache on the local device or in an edge cache located geographically nearby, for use in responding to requests. Applications which maintain caches of API results can be notified of their invalidation, and can detect the invalidation, propagate the invalidation to any further client tiers with the appropriate derivative type mapping, and refresh their cached values so that clients need not synchronously make the API requests again—ensuring that the client has access to the most up-to-date copy of data as inexpensively as possible—in terms of bandwidth and latency.

Abstract: The technology disclosed describes systems and methods for generating feature vectors from resource description framework (RDF) graphs. Machine learning tasks frequently operate on vectors of features. Available systems for parsing multiple documents often generate RDF graphs. Once a set of interesting features to be considered has been established, the disclosed technology describes systems and methods for generating feature vectors from the RDF graphs for the documents. In one example setting, a machine learning system can use generated feature vectors to determine how interesting a news article might be, or to learn information-of-interest about a specific subject reported in multiple articles. In another example setting, viable interview candidates for a particular job opening can be identified using feature vectors generated from a resume database, using the disclosed systems and methods for generating feature vectors from RDF graphs.

Abstract: A system receives one or more software artifacts for enabling a software version change requested for a production environment associated with at least one data center location. The system stores the one or more software artifacts in a memory location of a controlled-access production repository. The system receives a first authorization determination of the one or more software artifacts from an author-user account, the author-user account associated with a developer identity that created the one or more software artifacts. The system receives a second authorization determination of the one or more software artifacts from an additional-user account. Based on the first and second authorization determinations, the system determines whether to package the one or more software artifacts into a manifest for transmission to the at least one data center location.

Abstract: A system executes a set of database operations and determines counts of instances that each key is specified for a corresponding column by any database operations on a database table. The system identifies each key which is associated with any determined count that satisfies a threshold as a corresponding frequently accessed key. The system creates an optimized index for each column which stores any frequently accessed key. The system inserts each frequently accessed key into a corresponding optimized index. The system receives a database operation that specifies a specific key for a specific column in the database table. If any optimized index matches the specific column and stores any frequently accessed key that matches the specific key, then the system references a matching frequently accessed key in a matching optimized index to access a record, which is associated with the specific column and the specific key, via the database table.

Abstract: The system and method are directed to a prototypical contrastive learning (PCL). The PCL explicitly encodes the hierarchical semantic structure of the dataset into the learned embedding space and prevents the network from exploiting low-level cues for solving the unsupervised learning task. The PCL includes prototypes as the latent variables to help find the maximum-likelihood estimation of the network parameters in an expectation-maximization framework. The PCL iteratively performs an E-step for finding prototypes with clustering and M-step for optimizing the network on a contrastive loss.

Abstract: Systems and methods are provided for storing, at a storage device communicatively coupled to a computer, one or more operations to be executed for a web browser. A closed shadow document object model (DOM) may be generated by a component of a web page to be displayed in the web browser using the one or more of the stored operations. The closed shadow DOM may be configured to receive sensitive data or restricted data. The component of the web page that receives the sensitive data or restricted data may instantiate an inline frame (iFrame) with a same domain as the component. The web page to receive the sensitive data or restricted data via the instantiated iFrame may be displayed on a displayed device from an input device communicatively coupled to the computer for a component of the web page.

Abstract: Computer-readable media, method, and system for inviting a plurality of users to a group-based communication channel within a group-based communication system. The plurality of users are invited by transmitting a respective plurality of invitations to the users upon a sending user instruction. The outcome of a user accepting an invitation may be determined based on an approval privilege of the user and a status of the group-based communication channel.

Abstract: A computer-readable media, system, and method for providing role-based access management to channels within a group-based communication system. Role-based access management allows for a plurality of roles to be established and for users to be associated with these roles. Roles may be associated with sets of permissions allowing users assigned to the respective role to perform various actions within the group-based communication system. The group-based communication system may include preset, system roles with predetermined permissions and custom, user-defined roles may be created by administrators within the group-based communication system.

Abstract: Techniques are disclosed relating to maintaining a cache usable to locate data stored in a data structure. A computer system, in various embodiments, maintains a data structure having a plurality of levels that store files for a database. The files may include one or more records that each have a key and corresponding data. The computer system may also maintain a cache for the database whose entries store, for a key, an indication of a location of a corresponding record in a file of the data structure. In some embodiments, the computer system receives a request to access a particular record stored in the data structure where the request specifies a key usable to locate the particular record. The computer system may retrieve, from the cache via the key, a particular indication of a location of the particular record and may use the particular indication to access the particular record.

Abstract: Techniques are described for providing an interface for managing invitations to communicate via a communication platform. In an example, a first user can access a first interface to invite a second user to communicate via the communication platform. In response to input from the first user via the first interface, the communication platform can generate an invitation for the second user to communicate with the first user and can provide the invitation to the second user, such as by causing the invitation to be presented via a second interface. The second user can submit a response to the invitation via the second interface. The communication platform can update the first interface and the second interface based on response, such as, in examples in which the second user accepts the invitation, to reflect a newly established connection between the first user and the second user.

Abstract: Mechanisms and techniques for providing an isolated runtime environment are disclosed. Scoped properties are generated utilizing a namespace identifier. The namespace identifier is an identifier used to define a scope of at least an isolated application runtime context. Scoped objects are generated corresponding to one or more dependent services utilizing the one or more scoped properties and the namespace identifier. A target application is deployed to a container corresponding to the isolated application runtime context. The target application interacts with at least some of the dependent services utilizing the namespace identifier. At least one integration test is run on the target application in the container. The integration tests refer to the isolated application runtime context utilizing the namespace identifier.

Abstract: A method and system for handling asynchronous data streams in a multi-tenant system. The process includes receiving at least a first stream of data and a second stream of data by a rules engine, determining by pattern matching of the rules engine, whether data in the first stream or data in the second stream meet conditions of a rule defined by a tenant of the multi-tenant system, and implementing by the rules engine the rule including a set of actions to modify data from the second data stream, in response to the data in the first stream matching the conditions the rule.

Abstract: A method for data processing includes displaying, at a user interface, a plurality of attributes that are defined by a data model configured for a tenant of a multi-tenant system. The plurality of attributes includes a one-to-many attribute that is configured to support multiple inputs and a direct attribute configured to support a single input. The method may further include receiving a selection of a first one-to-many attribute for defining an expression for identifying a segment of entities. The method may further include activating, for selection at the user interface, a subset of the attributes based on each attribute of the subset being dependent on the first attribute. The method may further include receiving an indication of the expression, executing a database query to identify the segment of entities, and transmitting, to a content communication system, an indication of the segment of entities.

Abstract: A request to present digital content at a client machine associated with a designated network identifier may be received. For each of a plurality of preference characteristics, a respective characteristic query message may be transmitted via a network to a respective plurality of identity nodes via a gossip communication protocol defining a peer-to-peer procedure for transmitting information among the plurality of identity nodes. For each of the plurality of preference characteristics, a respective preference identification response message that includes a respective preference value corresponding with the respective preference characteristic may be received. The designated network identifier may be stored in a trust ledger shared among the plurality of identity nodes. A digital content item may be selected based at least in part on the preference values.

Abstract: An adaptive document curation method. A machine learning model is trained on a first library of documents to assign staleness scores to documents, each indicating a confidence that the document to which it is assigned should be archived. If a document has a staleness score at least equal to a threshold, the document is identified as a candidate to be archived or deleted.

Abstract: A multi-tenant system performs custom configuration of a tenant-specific chatbot to process and act upon natural language requests. The multi-tenant system configures the tenant-specific chatbots without requiring tenant-specific training. The multi-tenant system providing a user interface for configuring a tenant-specific set of permitted actions. The multi-tenant system determines a set of example phrases for each of the selected permitted actions. The multi-tenant system receives a natural language request from a user and identifies the action that the user wants to perform. The multi-tenant system uses a neural network to compare the natural language request with example phrases to identify an example phrase that matches the natural language request. The multi-tenant system performs the action corresponding to the matching example phrase.

Abstract: Techniques are described for expediting a generation of a means of communication between two people associated with different organizations. A first person associated with a communication platform may submit a request to the communication platform to generate an invitation to communicate via the communication platform. The first person may provide the invitation to a second person directly or via the communication platform. Responsive to receiving an indication that the second person has accepted the invitation, the communication platform may generate the means of communication between the first person and the second person. The communication platform may update respective user interfaces to include the means of communication. The communication platform may process messages and/or data between the first person and the second person that is input on the respective user interface and sent via the means of communication.

Abstract: Techniques are disclosed relating to temporary networks of edge computing devices. In some embodiments, an edge computing device manages, in response to occurrence of an event, a temporary network of edge computing devices. Managing the temporary network includes: forming the temporary network, managing membership of edge computing devices in the temporary network, causing the temporary network to perform a specified set of tasks, transmitting, to a remote server computing system, information associated with the specified set of tasks, and causing disbanding of the temporary network after determining that the specified set of tasks is complete. The disclosed techniques for managing temporary networks of edge computing devices may advantageously reduce the overall use of a network's bandwidth by reducing the amount of communication with a remote server system.

Abstract: A relational database system may receive, from a client, a query for a data object of a first type. The system may be configured to store a plurality of data objects of a second type such that each data object of the second type is associated with a respective data table and a respective value of a key prefix of an object identifier field. The key prefix may result in an upper limit of data objects supportable by the system. The system may determine that the query is indicative of the data object of the first type of a plurality of data objects of the first type that share a key prefix value such that the upper limit is exceeded. The system may identify a result based on determining that the query indicates data object of the first type and return a query response that indicates the result.

Abstract: Disclosed are systems, apparatus, methods and computer-readable media for updating information stored in a database system over a network. In some implementations, first contact data is retrieved from a first virtual portion of a database system, where the first contact data provides first contact information associated with at least one entity. In some instances, the first contact data is compared with second contact data, where the second contact data provides second contact information associated with the at least one entity. In some instances, at least some of the second contact information is retrieved from a social networking system. In various implementations, at least one difference between the first contact data and the second contact data is identified, where the at least one difference is capable of being presented in a user interface displayed at a computer system. In some instances, a selection identifying contact data to store is received.

Abstract: Techniques are disclosed relating to using different process groups to control allocation of execution resources for database connection processes that handle application requests. In disclosed embodiments, a database server receives a request from an application server for database resources, including application information specifying one or more attributes of the request. The server may assign a database connection process to access a database for the request and assign the database connection process to a process group based on the application information. The server may assign execution resources based on resource allocation parameters that are associated with the assigned process group.

Abstract: Methods, systems, and devices supporting orchestration for automated performance testing are described. A server may orchestrate performance testing for software applications across multiple different test environments. The server may receive a performance test indicating an application to test and a set of test parameters. The server may determine a local or a non-local test environment for running the performance test. The server may deploy the application to the test environment, where the deploying involves deploying a first component of the performance test to a first test artifact in the test environment and deploying a second component of the performance test different from the first component to a second test artifact in the test environment. The server may execute the performance test to obtain a result set, where the executing involves executing multiple performance test components as well as orchestrating results across multiple test artifacts to obtain the result set.

Abstract: A method performed by a system of a host organization for providing a right to forget data in a blockchain, the system providing a blockchain interface to a blockchain on behalf of a plurality of tenants of the host organization each serving as nodes in a blockchain network. The method includes receiving a request including an identifier of a requestor, the request to access transaction data designated as private, requesting access to the transaction data from nodes in the blockchain network including the identifier of the requestor, receiving at least one shared secret from a node in the blockchain network indicating consensus to access the transaction data by the requestor, and denying access to the transaction data in response to receiving insufficient shared secrets from the nodes indicating the transaction data is permanently unavailable to access.

Abstract: An online system that allows users to interact with it using expressions in natural language form includes an intent inference module allowing it to infer an intent represented by a user expression. The intent inference module has a set of possible intents, along with a small set of example natural language expressions known to represent that intent. When a user interacts with the system using a natural language expression for which the intent is not already known, the intent inference module applies a natural language inference model to compute scores indicating whether the user expression textually entails the various example natural language expressions. Based on the scores, the intent inference module determines an intent that is most applicable for the expression. If an intent cannot be determined with sufficient confidence, the intent inference module may further attempt to determine whether the various example natural language expressions textually entail the user expression.

Abstract: Disclosed embodiments include a Custom Resource Abstraction and Fabrication Tool (CRAFT) that declares operators in a robust, idempotent, and generic manner for any resource. In embodiments, a developer can run create, read, update, and delete (CRUD) operations on resources in any language. The developer can create configuration files that is used by CRAFT to generate and deploy application container with the operator according to the configuration files. Other embodiments may be described and/or claimed.

Abstract: Each of a plurality of wire web components predicted to be included in a graphical user interface (GUI) for presentation at a client machine. Each data object instance may be associated with a respective data object instance identifier and a respective one or more data object fields. A wire web component graph that includes a plurality of nodes may be constructed. A node may correspond to a wire web component, a data object field, or an application procedure interface (API). One or more of the data values may be retrieved from the respective APIs based on the wire web component graph. A GUI message including the retrieved data values and the wire web component graph may be transmitted to the client machine.

Abstract: A method and system for certificate management for services in a container orchestrator. The method includes requesting a certificate for a service from a cloud certificate manager, in response to detecting a request from a control plane of the container orchestrator for the certificate for the service, receiving the certificate from the cloud certificate manager, storing the certificate in a secret storage, and returning the location of the secret storage to a requester of the certificate.

Abstract: Exemplary systems, methods, and apparatuses migrate tenants between instances in a cloud based computing environment. The exemplary system assigns a dedicated share on multi-tenant cloud computing services instances. The exemplary system further receives performance characteristics for each of the tenants, analyzes the performance characteristics, detects an anomaly in one of the plurality of tenants responsive to analyzing the performance characteristics, and evicts one of the tenants in which the anomaly was detected from the one or more instances. The exemplary system further re-assigns the evicted tenant to a dedicated share on one or more multi-tenant cloud computing services instances other than the instance to which it was assigned before eviction.

Abstract: Techniques described herein are used to support cross platform data sharing, access, and management between a communication process flow management platform and a communication platform. Specifically, techniques described herein support a communication process flow management platform detecting an event associated with a communication process flow that control electronic communications between a tenant and a set of users. The platform may generate a data object corresponding to the event. The data object may include metadata associated with the event. The platform may transmit, to a communication platform, a request that includes the data object. The request may be configured to cause an entry associated with the event to be posted into the communication platform.

Abstract: A method, apparatus, and system for data processing to support real-time equivalent user interaction generation is described. To support real-time equivalent user interaction generation, a user's interactions with a first user interface of an application at a first user device are identified, the identified user's interactions with the first user interface of the application at the first user device may be converted into equivalent user interactions with a second user interface of the application based at least in part on a configuration of the second user interface of the application at a second user device, and the equivalent user interactions with the second user interface of the application at the second user device may be implemented, wherein the configuration of the second user interface of the application at the second user device and a configuration of the first user interface of the application at the first user device are different.

Abstract: Disclosed herein are system, method, and computer-readable medium embodiments for providing the ability to automate the process of generating load tests used for benchmarking APIs. Rather than having to manually generate load tests for a web service API, a test developer can interact with a test service through a web browser and provide the service an API specification and testing parameters. The test service can analyze the API specification, automatically identified endpoints of the API, and generate load tests according to the expected input/output structures of the endpoints. The automatic load test generation can proceed by referring to a library of test instructions and extracting the portions of the test instructions that work for the identified endpoints.

Abstract: Embodiments described herein provide adversarial attacks targeting the cross-lingual generalization ability of massive multilingual representations, demonstrating their effectiveness on multilingual models for natural language inference and question answering. An efficient adversarial training scheme can thus be implemented with the adversarial attacks, which takes the same number of steps as standard supervised training and show that it encourages language-invariance in representations, thereby improving both clean and robust accuracy.

Abstract: An extensible platform-as-a-service (PaaS) system for use during the software development lifecycle (SDLC) processes of a user application. The extensible PaaS system receives, from a user, values associated with a user application for features exposed in a presented application programming interface (API) to the user. The system displays a set of software modules for during the SDLC processes of the user application. The system receives a selection of software modules for custom configuration from the user. The system generates a set of custom configured software modules for the received selection of software modules. The system generates a set of automatically configured software modules for the remaining software modules. The system uses the custom configured software modules and the automatically configured software modules during the SDLC processes of the user application.

Abstract: Embodiments of the present disclosure relate to detecting and mitigating errors associated with software pull requests such as software deployment packages. The embodiments include identifying a failure of a pull request, identifying a system error associated with the failure, determining a failure mitigation process based on the failure and the system error, and executing the failure mitigation process to resolve the failure. The errors can be classified as system errors, user errors or planned downtime. The failure mitigation process can include generating an alert associated with the identified system error, updating a status of the pull request, re-evaluating the failure after a predetermined period of time, and retrying deployment of the pull request using an exponential retry process.

Abstract: System determines first and second scores based on applying function to features of first and second values in fields in first and second records, respectively. System determines first priority based on first score and second priority based on second score for displaying first and second values in fields in first profile. System revises, based on feedback associated with first value and second value, parameter associated with function and determines third score based on applying function, associated with revised parameter, to feature of third value in field in third record. System determines fourth score based on applying function, associated with revised parameter, to feature of fourth value in field in fourth record and determines third priority, based on third score, for displaying third value in field in second profile and fourth priority, based on fourth score, for displaying fourth value in field in second profile.

Abstract: Techniques are disclosed relating to installing and operating applications in a server-based application workspace. A computer system, while operating the server-based application workspace, may store subscription information indicating a user that is a developer for a particular application package, and one or more users that are subscribers for the particular application package. The computer system may further store lock data for the particular application package that indicates user permissions to edit at least one application component for the particular application package. Based on the lock data, the computer system may permit the developer to edit the at least one application component of the particular application package, and deny requests from the one or more users to edit the at least one application component.

Abstract: Disclosed are some implementations of systems, apparatus, methods and computer program products for tracking inbound email messages in association with database records. A first electronic mail message received via a network from a first client device is processed, where the first electronic mail message has a header including a message identifier. The message identifier is obtained from the header and parsed such that an encrypted portion and one or more unencrypted portions are obtained, where a first unencrypted portion of the unencrypted portions includes an entity identifier associated with a first database record of a database. A secret key associated with the first electronic mail message is obtained and the first electronic mail message is authenticated using the secret key, the encrypted portion of the message identifier, and at least one unencrypted portion of the unencrypted portions of the message identifier.

Abstract: A system receives a record which includes a string and separates the string into a number of tokens, including a token and another token. The system identifies a pattern that includes an entity, another entity, and a number of entities that equals the number of tokens, and another pattern that includes the same number of entities as the number of tokens. The system determines a combined probability that combines a probability based on the number of entries in the entity's dictionary which stores the token, and another probability based on a number of character types in the other entity that match characters in the other token. If the combined probability associated with the pattern is greater than another combined probability associated with the other pattern, the system matches the record to a system record based on recognizing the token as the entity and the other token as the other entity.

Abstract: A computing platform is configurable to cause generating a workflow data object configured to represent a plurality of operations included in a workflow associated with a user, the workflow data object being generated based on a designated sequence of the plurality of operations. The computing platform is further configurable to cause receiving a verified status indicator associated with at least one of the plurality of operations, the verified status indicator including a verified credential generated in response to the user completing at least one of the plurality of operations. The computing platform is further configurable to cause updating the workflow data object in response to the receiving of the verified status indicator, the updating including a credential data object in the workflow data object, and updating a representation of the at least one of the plurality of operations based on the credential data object.

Abstract: Techniques and structures to facilitate anomaly detection within a networking system, including receiving a plurality of performance metric messages at a database system, extracting a plurality of anomaly detection messages included in the performance metric messages, storing the plurality of anomaly detection messages in an in-memory database and executing a machine learning model to process the plurality of anomaly detection messages in the in-memory database to detect whether anomalous usage of the networking system has been detected.

Abstract: A method and apparatus for generating personalized suggestions for natural language search queries, where the method includes receiving a natural language query input from a user, obtaining set of suggestions for the natural language query, identifying a set of concepts in the set of suggestions, applying co-occurrence model to the set of concepts to obtain user specific concept probabilities and vocabulary probabilities, computing suggestion scores for at least one suggestion in the set of suggestions based on the user specific concept probabilities and vocabulary probabilities, and ranking the set of suggestions based on suggestion scores.

Abstract: Adaptive field-level matching is described. A system identifies first elements in a field of a prospective record for a database, and second elements in the field of a candidate record, in the database, for matching the prospective record. The system identifies features corresponding to any of the first elements that are identical to any of the second elements, any of the first elements that are absent from the second elements, and any of the second elements that are absent from the first elements. A machine-learning model uses the features to determine a field match score for the candidate record's field. Another machine-learning model weighs the field match score and weighs another field match score for another field of the candidate record to determine a record match score for the candidate record. If the record match score satisfies a threshold, the system identifies the candidate record as matching the prospective record.

Abstract: Media, method, and system for providing encryption key management for international data residency. Organizations using a group-based communication system can designate a particular geopolitical area where that organization's data can be stored and another geopolitical area (which may be the same or different) where encryption keys used to encrypt and decrypt that data should be stored. Users of that organization can post message or access messages previously posted on the group-based communication system from any geopolitical area, causing the system to automatically store and retrieve messages and encryption keys from the appropriate regions to allow the users to transparently access the group-based communication system while maintaining security and data residency requirements.

Abstract: Techniques for enabling access to external data of a user for facilitating communications via a communication platform are described herein. A user of the communication platform maintains external data with a third-party service provider. The communication platform receives, in association with a user account of the user, an indication of intent to grant the communication platform access to the external data and an authorization code (the “code”). The communication platform later receives, from the first user account, a request to access the external data. For example, the request can include an input corresponding to an intended recipient of a message. In response to the input, the communication platform sends a request, with the code, to the third-party service provider to obtain contact data associated with the intended recipient and causes the contact data to be presented in association with the message, such as in a “To” field of the message.

Abstract: Systems, methods, and related technologies are provided for generating interactive emails and tracking user interactions. In one implementation, an email an be received within an email client. The email can be rendered within the email client, such as by: presenting a first selectable element within the email client, presenting a second selectable element within the email client, and presenting one or more content items within the email client. A selection of the first selectable element can be received within the email client. In response to the selection of the first selectable element, a presentation of the one or more content items can be adjusted within the email client.

Abstract: According to some implementations, compliance assessment metrics in a subset of two or more compliance assessment metrics are combined to form a combined compliance assessment metric. Each compliance assessment metric in the subset reflects a level of compliance of a set of rules with a different type of data privacy and/or data security laws, regulations, and/or policy. The set of rules are to manage personal data in an organization instance of a customer of a cloud-based software provider capable of hosting the organization instance in one or more datacenters in a plurality of different geographic regions. In addition, a dashboard, which is part of a data policy compliance service provided by the cloud-based software provider, is caused to be displayed and includes at least the combined compliance assessment metric.