Abstract: Techniques are disclosed relating to the protection of secrets within a software development lifecycle. Developers can use an encryption service to encrypt a secret to be used by an application within a package. The secret can be associated with the application, and then encrypted and included in a package that is signed and passed through a software automation pipeline to a data center that hosts the production server for the application. The application executing on the production server can request that the secret be decrypted by a decryption service after package verification. A developer can also specify, in a manifest file, a set of secrets needed for applications executing in the same data center. The manifest file may be passed from the software development environment to the data center, where the specified secrets are created and used by the applications without ever residing or being accessible outside the data center.

Abstract: Methods, systems, apparatuses, and computer program products are described. A database system may store data logs tracking performance data for multiple tenants of the database system. The database system may receive, via a user interface of a user device, a user input indicating a request to perform an analysis of performance data associated with one of the multiple tenants. The request may indicate a time period and a performance metric for the analysis. The database system may execute a query based on the analysis. The query may execute on a subset of the data logs associated with the tenant and the performance metric. The system may analyze a result of the query to determine one or more entities that affected the performance metric during the time period. The system may transmit an indication of the one or more entities for display at the user interface.

Abstract: Disclosed are some implementations of systems, apparatus, methods and computer program products for facilitating the authentication of computing system requests across tenants of at least one multi-tenant database system. Authentication is facilitated using a central registry that is accessible by and independent from the tenants of the multi-tenant database system.

Abstract: Mapping of database partitions to available nodes. Metric information related to the partitions of the database are stored. One or more metrics associated with the partitions are gathered. A plurality of potential mappings of partitions to nodes are evaluated. One of the potential mappings of partitions to nodes to result in improved metric distribution among the nodes and the partition moves are within a pre-selected move constraint is selected. The selected potential mapping is implemented by moving one or more partitions between one or more nodes.

Abstract: A data server may support segment identification based on a selected user profile. For example, a user may select a user profile as the basis for identifying a segment of additional user profiles. The server may identify attributes associated with the selected user identifier and generate an expression based on the identified subset. The expression may include a normalization function corresponding to at least one attribute. The normalization function may identify correlated attribute values for an attribute associated with the selected user profile. The data server may query a data storage system to identify the additional user profiles based on the expression. The data server may also support user defined Boolean expressions such that the expression is used to identify user identifiers associated with a first attribute and a second attribute.

Abstract: Methods, computer readable media, and devices for distributing risk of multiple realms across multiple resources based on a realm risk model are disclosed. One method may include determining a time score based on an average response, a traffic score based on an average client request rate, and a risk score based on the time score and the traffic score for a plurality of realms, distributing the plurality of realms across a fixed number of resources based on the risk scores of the plurality of realms, and in response to a change in a risk score of a realm, redistributing the plurality of realms across the fixed number of resources based on a difference between a maximum risk score and a minimum risk score.

Abstract: A method to enable interoperability between blockchain networks. The method including receiving, by a mapper of an interoperability network, a transaction emitted by a first blockchain network, transforming the received transaction to a transaction compatible with a second blockchain network according to a mapping determined for the received transaction, and forwarding the transformed transaction to the second blockchain network to be processed by the second blockchain network.

Abstract: Disclosed herein is computer technology that applies natural language processing (NLP) techniques to training data to generate information used to train a natural language generation (NLG) system to produce output that stylistically resembles the training data. In this fashion, the NLG system can be readily trained with training data supplied by a user so that the NLG system is adapted to produce output that stylistically resembles such training data. In an example, an NLP system detects a plurality of linguistic features in the training data. These detected linguistic features are then aggregated into a specification data structure that is arranged for training the NLG system to produce natural language output that stylistically resembles the training data. Parameters in the specification data structure can be linked to objects in an ontology used by the NLG system to facilitate the training of the NLG system based on the detected linguistic features.

Abstract: Techniques are disclosed relating to a database system includes worker nodes operable to perform transactions and director nodes operable to ensure transactional consistency for the transactions. A worker node may receive a request to perform a transaction involving writing a record. The worker node may then issue, to director nodes of the database system, a request for information that facilitates performance of an operation for the transaction. A director node may determine whether to approve the request based on whether the operation could cause transactional inconsistency in the database system. The worker node may proceed to perform the operation for the transaction in response to receiving approval responses from a majority of the director nodes, with none of the received responses indicating a disapproval of the transaction.

Abstract: Artificial intelligence methods and systems for triggering the generation of narratives are disclosed. Specific embodiments relate to real-time evaluation and automated generation of narrative stories based on received data. For example, data can be tested against data representative of a plurality of story angles to determine whether a narrative story incorporating one or more such story angles is to be automatically generated.

Abstract: Techniques for refactoring data in a database are disclosed. A database may initially store both relational and non-relational data. A request to access data from a first data element in the database may be received via a relational database API. Upon receiving the request, a determination is made as to whether the first data element has been refactored into relational and non-relational portions. If the first data element has not been refactored, a refactoring operation is carried out by storing relational portions of the first data element into a relational database and the non-relational portions of the first data element into a non-relational database. The refactoring is performed concurrent with providing data to a requesting computing system. Additionally, refactoring information is updated to indicate that the first data element has been refactored.

Abstract: Systems and methods are provided for determining a first upper bound of a x-direction frame margin of a downsampled image and a second upper bound for a y-direction frame margin of the downsampled image. A total value for each row and column of a weighted grayscale image formed from the downsampled image may be determined. An outlier filtering may be applied to the determined total values for each row and column of the weighted grayscale image. A peak of pairwise ratios of consecutive values from left and right sides of the weighted grayscale image may be used to determine an x-margin, and a peak of pairwise ratios of consecutive values from top and bottom sides of the weighted grayscale image may be used to determine a y-margin. Content may be applied to the image based on the determined x-margin and y-margin values to form a composite image.

Abstract: A request to exchange of a first quantity of a first fungible digital token type stored within a smart contract instance recorded in a public trust ledger and owned by a first party within the public trust ledger may be received via a communication interface at a database system. The request may authenticate a first account in the database system. The first account may be linked with the first party within the public trust ledger. The smart contract instance may be executed to determine whether the requested exchange is permissible based on one or more transaction rules included within the smart contract instance. The database system may be updated to reflect a transaction recorded within the public trust ledger when it is determined that the requested exchange is permissible.

Abstract: Methods, systems, apparatuses, devices, and computer program products are described. A group-based communication system may determine timing for sending notifications to users of the group-based communication system to improve the likelihood of the users interacting with the notifications, interacting with other users in the system, or both. For example, the group-based communication system may identify a notification to send to a user, where the user is associated with a user identifier and a workspace identifier in the group-based communication system. The system may dynamically determine a time for sending the notification based on activity data for the user corresponding to the user identifier and activity data for multiple other users corresponding to the workspace identifier (e.g., members of a team with the user). The system may send the notification for display in a user interface of a user device operated by the user at the determined time.

Abstract: Differentiated message presentation in a communication platform is described. In an example, a message to be posted to the communication platform can be received, wherein the communication platform is associated with a plurality of users that are permissioned to access content associated with the communication platform. In an example, a first user profile of a first user of the plurality of users can be associated with a first characteristic of the first user and a second user profile of a second user of the plurality of users can be associated with a second characteristic. Techniques described herein enable differentiated presentation of the message, in respective user interfaces of the communication platform, based at least in part on the first characteristic and the second characteristic.

Abstract: Embodiments described a method of video-text pre-learning to effectively learn cross-modal representations from sparse video frames and text. Specifically, an align and prompt framework provides a video and language pre-training framework that encodes the frames and text independently using a transformer-based video encoder and a text encoder. A multi-modal encoder is then employed to capture cross-modal interaction between a plurality of video frames and a plurality of texts. The pre-training includes a prompting entity modeling that enables the model to capture fine-grained region-entity alignment.

Abstract: Methods, apparatus and computer program product for generating tiered search index fields based on a divided group-based communication data corpus in a group-based communication platform are described herein. In some embodiments, the system provides for receiving a group-based communication data corpus, generating a retrieval score, and assigning each group-based communication data object associated with a retrieval score. Each group-based communication data object may meet or exceed a retrieval score threshold of a high retrieval probability corpus. Each group-based communication data object associated with a retrieval score below the retrieval score threshold may be assigned to a low retrieval probability corpus. High and a low retrieval probability search index fields may be generated and associated with the high and low retrieval probability corpus.

Abstract: Methods, systems, and devices supporting dynamic process orchestration are described. An orchestration server may receive a request defining a data modification process from a user device. The orchestration server may generate an execution file based on the request, and the execution file may include a set of tasks for performing the data modification process and an order for performing the set of tasks. The orchestration server may execute, for the execution file, a first set of tasks according to the order for performing the set of tasks and, in some cases, may update the execution file based on executing the first subset of tasks. For example, updating the execution file may involve modifying a second subset of tasks of the set of tasks. The orchestration server may execute, for the updated execution file, the modified second subset of tasks according to the order for performing the set of tasks.

Abstract: Methods, systems, apparatuses, devices, and computer program products are described. An intelligent routing system may route a data object to a path in a process flow using a model, such as a machine-learned model. The system may receive a first data object and may route the first data object along a path of the process flow using a random routing procedure, for example, for model training. The routing may involve performing operations based on the path and the features of the first data object. The system may update one or more models based on an outcome of the operations. Following training, the system may insert a model into the process flow at a decision point between paths. The system may receive a second data object and may route the second data object to a path using the model and based on features of the second data object.

Abstract: Some implementations of the disclosed systems, apparatus, methods and computer program products may provide for determination of resource usage by tenants in a multi-tenant server system. Tenants may provide resource requests to a database of the multi-tenant server system and such resource requests may include context data. Periodic snapshots of the database may be performed to determine the pending resource requests received by the various tenants and, based on the snapshots and the context data, the resource usage of the various tenants, as well as the system as a whole, may be determined and forecasted for the future.

Abstract: A method for generating a model for recommendations from an item data set for a target data set includes embedding a set of targets from the target data set in a shared coordinate space using a first embedding function, embedding a first set of items from the item data set in the shared coordinate space using a second embedding function, selecting at least one target from the set of targets, and identifying a second set of items from the first set of items that are proximate to the at least one target as candidates from the recommendations.

Abstract: A device may provision two or more servers, each of the servers including a network interface. In addition, the device may enable the network interface in each of the provisioned servers, create a shared volume, assign the shared volume to each of the provisioned servers, and enable a clustering application on each of the provisioned servers to form a cluster comprising the provisioned servers, the cluster having a heartbeat via the network interfaces.

Abstract: Artificial intelligence (AI) technology can be used in combination with composable communication goal statements to facilitate a user's ability to quickly structure story outlines in a manner usable by an NLG narrative generation system without any need for the user to directly author computer code. Narrative analytics that are linked to communication goal statements can employ a conditional outcome framework that allows the content and structure of resulting narratives to intelligently adapt as a function of the nature of the data under consideration. This AI technology permits NLG systems to determine the appropriate content for inclusion in a narrative story about a data set in a manner that will satisfy a desired communication goal.

Abstract: Disclosed are methods, apparatus, systems, and computer readable storage media for interacting with one or more data objects in an online social network. A user interface includes a publisher with a custom action. The custom action is defined in accordance with custom action instructions provided by a first entity via an application programming interface (API). Such custom action instructions may declaratively or programmatically define the data object, the interaction to be performed with the data object, and other attributes associated with the custom action. A user may request to interact with the data object via selection of the custom action by a second entity. Information may be submitted through the publisher to interact with the data object to update a database system associated with the data object. A feed item may be presented for inclusion in the information feed based on the update.

Abstract: In an example, an apparatus may include a validation module configured to identify a security policy update from a security as code repository, wherein the identified security policy update is a candidate for deployment to a production environment having a plurality of attributes defined by an infrastructure as code repository; identify, from the plurality of attributes and using the infrastructure as code repository, individual attributes that correspond to the identified security policy update, wherein the identified individual attributes are identical to a subset of the plurality of attributes; generate a test environment based on the identified individual attributes; following deployment of the identified security policy update to the test environment, check for security exceptions or availability exceptions using the test environment; and output validation results based on a result of the checking.

Abstract: A system is disclosed. The system includes a resource monitor to monitor a resource utilization of a set of resources of one or more instances, the resource utilization corresponding to a first level of performance and cost and an instance type determiner to, based on the resource utilization, determine if there is an instance type for at least one of the one or more instances, with a resource profile, that will provide a second level of performance and cost that is closer to a default level of performance and cost than the first level of performance and cost. In addition, the system also includes an instance type recommender to, based on the determining, perform one of making and not making a recommendation to replace the instance type of the at least one of the one or more instances.

Abstract: The technology disclosed can query configuration management system data and includes cross table selection criteria and joined data return.

Abstract: Examples include maintaining a virtual pool of containers; receiving a request from a client for one of a plurality of services to performed; when the request includes client code, determining whether the request belongs to regular or priority queue based on two models; adding the request to an appropriate shard in the queue; getting the request from the selected one of the plurality of queues and assigning a container for the request from the virtual pool of containers, the client code to be executed in the container; and after the client code is executed in the container, deleting the container from the virtual pool.

Abstract: Disclosed herein are system, method, and computer program product embodiments for automatically cataloging updated Application Programming Interface (API) specifications. The API specifications may have been previously published to an application exchange platform. An automatic cataloging tool installed at an API development system may identify an updated API specification committed to an API specification repository. To validate that a change has been made, the automatic cataloging tool may compare the updated specification, metadata, and/or referenced documentation files to an API specification previously posted to the application exchange platform. In response to determining that the API specifications differ, the automatic cataloging tool may transmit the updated API specification to the application exchange platform. The application exchange platform may then replace the previous API specification with the updated API specification for client devices to view.

Abstract: A computer-implemented method for providing user interface functionalities is disclosed. The method includes providing a base design system layer including web browser components providing platform-agnostic user interface functionalities, an application programming interface (API) that extends the base design system layer into a second design system layer providing platform-specific user interface functionalities, inheriting and extending extensible APIs from the second design system layer, building a third design system layer using the extensible APIs, providing product-specific user interface functionalities using the third design system layer, inheriting and extending extensible APIs from the second design system layer, building a fourth design system layer using the extensible APIs, and providing presentation-specific user interface functionalities using the fourth design system layer.

Abstract: Methods, media, and systems for a changing a private channel in a channel-based communication system from an “invited-members” mode to a “whitelisted groups” mode. When in a whitelisted-groups mode, the channel administrator can whitelist one or more groups for channel membership. The whitelisted groups may be external groups managed by an identity provider. Based on the whitelisted groups, users cannot be added to the private channel without being a member of one of the whitelisted groups. Users are also automatically removed from the channel if they are no longer in one of the whitelisted groups for any reason.

Abstract: Exemplary systems, methods, and apparatuses implement efficient storage and validation of data and metadata within a blockchain using Distributed Ledger Technology (DLT) in conjunction with a cloud based computing environment.

Abstract: Managing organization disconnections from a shared resource of a communication platform is described. In a sharing approval repository of a communication platform, a shared resource can be associated with a host organization identifier and a non-host organization identifier. In an example, in response to receiving, from a user computing device associated with the host organization identifier or the non-host organization identifier, a resource disconnection request comprising a disconnecting organization identifier and a resource identifier associated with the shared resource, the sharing approval repository can be updated to add a disconnection indication for the resource identifier in association with the disconnecting organization identifier.

Abstract: Disclosed are some implementations of systems, apparatus, methods and computer program products for implementing a polling command strategy in a database system. A subscriber transmits, to a database system, a subscription to an event. When the database system detects the event, a publisher transmits a message notifying the subscriber of the occurrence of the event. The subscriber processes the message received from the publisher. Responsive to processing the message, the subscriber waits a predefined period of time. After waiting the predefined period of time, the subscriber sends a polling message to the database system. Responsive to the polling message, the subscriber obtains data satisfying the subscription from the database system and the subscriber processes the data.

Abstract: An agent for navigating a mobile automated system is disclosed herein. The navigation agent receives a navigation instruction and visual information for one or more observed images. The navigation agent is provided or equipped with self-awareness, which provides or supports the following abilities: identifying which direction to go or proceed by determining the part of the instruction that corresponds to the observed images (visual grounding), and identifying which part of the instruction has been completed or ongoing and which part is potentially needed for the next action selection (textual grounding). In some embodiments, the navigation agent applies regularization to ensures that the grounded instruction can correctly be used to estimate the progress made towards the navigation goal (progress monitoring).

Abstract: Techniques are disclosed relating to filtering messages. A computer system may detect an occurrence of an event of a particular type. The computer system may determine whether to enqueue, in a message queue, a message that identifies a set of tasks to be performed in relation to the event. The determination may be based on a response received from a cache that stores a subset of filter rules of a filter rules table. Based on the response indicating a cache miss, the computer system may enqueue the message in the message queue. A process that processes the message may be operable to resolve the cache miss by 1) accessing a filter rule from the filter rules table that indicates whether messages for events of the particular type should be enqueued in the message queue and 2) updating the cache to store the filter rule.

Abstract: A system is provided for object localization in image data. The system includes an object localization framework comprising a plurality of object localization processes. The system is configured to receive an image comprising unannotated image data having at least one object in the image, access a first object localization process of the plurality of object localization processes, determine first bounding box information for the image using the first object localization process, wherein the first bounding box information comprises at least one first bounding box annotating at least a first portion of the at least one object in the image, and receive first feedback regarding the first bounding box information determined by the first object localization process. The system is further configured to persist the image with the first bounding box information or access a second object localization process based on the first feedback.

Abstract: A method and system for message handling implemented by a first node in a distributed computing environment. The method including receiving a message including a connection identifier to identify a connection in the application layer to be utilized to send the message to a client application, parsing the connection identifier to determine a node identifier indicating a second node in the distributed computing environment that implements the connection, and forwarding the message to the second node that implements the connection by a message broker that utilizes a routing information registry to locate the second node using the node identifier, in response to the first node having a different node identifier than the node identifier of the message.

Abstract: Techniques for facilitating a digital signature occurrence associated with an object transmitted via a communication channel associated with a group-based communication platform. The object may be created by a user within either the group-based communication platform or a third-party application and transmitted to one or more other users associated with the communication channel via the group-based communication platform. The group-based communication platform may be configured to authenticate a digital signature and, based on a verification of the authenticity, associate the digital signature with the object. The group-based communication platform may cause the digital signature to be presented via an interface associated with the communication channel, such as proximate to or viewable in association with the object.

Abstract: A cloud infrastructure is configured and deployed for managing services executed on a cloud platform. The cloud infrastructure includes a control datacenter configured to communicate with one or more service datacenters. The service datacenter deploys one or more application programming interfaces (API's) associated with a service. The service datacenter also deploys an administration agent. The control datacenter hosts an engine that receives requests from users to perform administration operations by invoking the administration API's. In this manner, the control datacenter functions as a centralized control mechanism that effectively distributes administration operation requests as they are received from users to service datacenters that can service the requests. The cloud infrastructure provides an auditable, compliant and secure management system for administering services for distributed systems running in the cloud.

Abstract: Methods and apparatus for mediating user access to services over a network are described. Access is provided by a service network host to a plurality of connectors providing access to a plurality of services over the network. The services are provided by entities independent from the service network host. The connectors including a first connector are configured to communicate with a first service using a first format to retrieve or modify data associated with the first service. The first connector is further configured to identify one or more methods or data fields of the first service. The service network host is further configured to provide, to a computer associated with a user over the network, one or more directions for using the first connector to display and/or modify data from the first service over the network.

Abstract: Techniques for clustering a plurality of virtual space servers based on communication platform data are discussed herein. In some examples, a user may post a message to a virtual space of a communication platform. The communication platform may transmit the message to virtual space servers configured to manage the virtual space within which the message originated. In such examples, the communication platform may identify clusters of virtual space servers and determine within which cluster the corresponding virtual space server is located. Virtual space servers may be clustered based on attribute data associated with communication platform data. In some examples, the communication platform may send the message to the virtual space server which may send the message to subscribing gateway servers. Further, the gateways servers may send the message to the recipient client devices. The recipient client devices may display the message via a user interface of the communication platform.

Abstract: A system can allow collaboration between two or more tenants in a multi-tenant system. Each tenant can share a common access to a processing space and a data storage device. Each tenant can be assigned to a virtual environment having a dedicated portion of the data storage device. The system can create a database record in a first dedicated portion assigned to the first tenant. The database record can be displayed on a user interface of the first tenant and include a collaboration tool component embedded within the database record. The database record can be transmitted to a database and transmitted from the database to a second dedicated portion of the data storage device. The second dedicated portion can be assigned to a second tenant of the multi-tenant system.

Abstract: Systems and methods for verifying a firewall for a cloud provider. The method includes receiving by a timelord module configured with access to a plurality of HTTP attacks that incorporate random tokens, an updated policy ok signal that was generated by an external element. The timelord module responds by (a) loading a first HTTP attack with a first expected response that is either forbidden or accepted, the first HTTP attack including the random tokens in a form of a header key value parameter; (b) sending the first HTTP attack to the firewall; (c) comparing a response from the firewall to the first HTTP attack with the first expected response; and (d) incrementing the first HTTP attack and repeating (a)-(c) until the plurality of HTTP attacks has been sent; and deleting the random tokens after the plurality of HTTP attacks have been sent.

Abstract: Disclosed are examples of systems, apparatus, methods and computer program products for sharing and publishing files. In one aspect, the database system can maintain a user database, a file database and a library. The database system can receive a first request initiated by a first user to share a first file with one or more second users and, responsive to the first request, enable a second set of one or more permissions for each of the second users. The database system also can receive a second request initiated by the first user to publish the first file to the library and, responsive to the second request, publish the first file to the library. The database system additionally can restrict access to the published file based on permissions associated with the library.

Abstract: Systems, devices, and techniques are disclosed for database inventory isolation. Demand levels for access to items may be monitored. The items may have associated inventory counts in a database. An item of the items for which to isolate the inventory count associated with the item may be determined based on the demand levels. The inventory count associated with the determined item may be isolated by moving the inventory count associated with the determined item from a first data block that stores the inventory count associated with the determined item and inventory counts associated with others of the items to a second data block that does not store any other inventory counts.

Abstract: A computer-implemented method of providing targeted content to a user includes generating a query index from a data corpus, the query index including a plurality of market segment-based queries, wherein each market segment-based query of the plurality of queries is configured to provide targeted content on a browser user interface of a user determined to be within a corresponding market segment.