{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,11]],"date-time":"2026-06-11T15:52:18Z","timestamp":1781193138339,"version":"3.54.1"},"publisher-location":"Cham","reference-count":29,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032057266","type":"print"},{"value":"9783032057273","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,9,22]],"date-time":"2025-09-22T00:00:00Z","timestamp":1758499200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,9,22]],"date-time":"2025-09-22T00:00:00Z","timestamp":1758499200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-05727-3_39","type":"book-chapter","created":{"date-parts":[[2025,9,21]],"date-time":"2025-09-21T07:44:06Z","timestamp":1758440646000},"page":"467-481","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":5,"title":["ARPaCCino: An Agentic-RAG for\u00a0Policy as\u00a0Code Compliance"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0009-0006-3402-3675","authenticated-orcid":false,"given":"Francesco","family":"Romeo","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-9844-0229","authenticated-orcid":false,"given":"Luigi","family":"Arena","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-2625-631X","authenticated-orcid":false,"given":"Francesco","family":"Blefari","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-3183-2977","authenticated-orcid":false,"given":"Francesco Aurelio","family":"Pironti","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-2356-398X","authenticated-orcid":false,"given":"Matteo","family":"Lupinacci","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2537-8918","authenticated-orcid":false,"given":"Angelo","family":"Furfaro","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,9,22]]},"reference":[{"key":"39_CR1","doi-asserted-by":"crossref","unstructured":"Rahman, A.A.U., Helms, E., Williams, L., Parnin, C.: Synthesizing continuous deployment practices used in software development. In: 2015 Agile Conference, pp. 1\u201310. IEEE (2015)","DOI":"10.1109\/Agile.2015.12"},{"key":"39_CR2","unstructured":"Humble, J., Farley, D.: Continuous Delivery: Reliable Software Releases Through Build, Test, and Deployment Automation. Pearson Education (2010)"},{"key":"39_CR3","doi-asserted-by":"crossref","unstructured":"Guerriero, M., Garriga, M., Tamburri, D.A., Palomba, F.: Adoption, support, and challenges of infrastructure-as-code: insights from industry. In: 2019 IEEE International Conference on Software Maintenance and Evolution (ICSME), pp. 580\u2013589. IEEE (2019)","DOI":"10.1109\/ICSME.2019.00092"},{"key":"39_CR4","unstructured":"hashicorp\/terraform"},{"key":"39_CR5","unstructured":"Red Hat. Ansible automation platform (2024)"},{"key":"39_CR6","unstructured":"Pulumi Corporation. Pulumi: Modern infrastructure as code"},{"key":"39_CR7","doi-asserted-by":"crossref","unstructured":"Rahman, A., Farhana, E., Parnin, C., Williams, L.: Gang of eight: a defect taxonomy for infrastructure as code scripts. In: Proceedings of the ACM\/IEEE 42nd International Conference on Software Engineering, pp. 752\u2013764 (2020)","DOI":"10.1145\/3377811.3380409"},{"key":"39_CR8","doi-asserted-by":"crossref","unstructured":"Hasan, M.M., Bhuiyan, F.A., Rahman, A.: Testing practices for infrastructure as code. In: Proceedings of the 1st ACM SIGSOFT International Workshop on Languages and Tools for Next-Generation Testing, pp. 7\u201312 (2020)","DOI":"10.1145\/3416504.3424334"},{"key":"39_CR9","unstructured":"Hassan, M.M., Salvador, J., Rahman, A., Karmaker, S.: Large language models for it automation tasks: are we there yet? arXiv preprint arXiv:2505.20505 (2025)"},{"key":"39_CR10","doi-asserted-by":"crossref","unstructured":"Joshi, S.: A review of generative AI and DevOps pipelines: CI\/CD, agentic automation, MLOps integration, and large language models. In: CD, Agentic Automation, MLOps Integration, and Large Language Models, June 2025","DOI":"10.2139\/ssrn.5290005"},{"key":"39_CR11","unstructured":"Policy as code. https:\/\/developer.hashicorp.com\/sentinel\/docs\/concepts\/policy-as-code"},{"key":"39_CR12","doi-asserted-by":"crossref","unstructured":"Rajapakse, R.N., Zahedi, M., Babar, M.A., Shen, H.: Challenges and solutions when adopting DevSecOps: a systematic review. Inf. Softw. Technol. 141, 106700 (2022)","DOI":"10.1016\/j.infsof.2021.106700"},{"key":"39_CR13","unstructured":"GitHub - open-policy-agent\/OPA: Open Policy Agent (OPA), June 2025"},{"key":"39_CR14","unstructured":"Sentinel | HashiCorp Developer \u2014 developer.hashicorp.com. https:\/\/developer.hashicorp.com\/sentinel. Accessed 26 June 2025"},{"key":"39_CR15","unstructured":"Wooldridge, M.J.: An Introduction to Multiagent Systems, 2 edn. Wiley, Chichester (2012)"},{"key":"39_CR16","doi-asserted-by":"crossref","unstructured":"Xi, Z.:. The rise and potential of large language model based agents: a survey. Sci. China Inf. Sci. 68 (2025)","DOI":"10.1007\/s11432-024-4222-0"},{"key":"39_CR17","unstructured":"Lewis, P., et\u00a0al.: Retrieval-augmented generation for knowledge-intensive NLP tasks. In: Advances in Neural Information Processing Systems (2020)"},{"key":"39_CR18","unstructured":"Chase, H.: Langchain, October 2022"},{"key":"39_CR19","unstructured":"Liu, J.: Llamaindex, November 2022"},{"key":"39_CR20","unstructured":"Chalasani, P., Jha, S.: Langdroid"},{"key":"39_CR21","unstructured":"Palavalli, M.A., Santolucito, M.: Using a feedback loop for LLM-based infrastructure as code generation, November 2024"},{"key":"39_CR22","doi-asserted-by":"crossref","unstructured":"Low, E., Cheh, C., Chen, B.: Repairing infrastructure-as-code using large language models. In: 2024 IEEE Secure Development Conference (SecDev), pp. 20\u201327, October 2024","DOI":"10.1109\/SecDev61143.2024.00008"},{"key":"39_CR23","unstructured":"Srivatsa, K.G., Mukhopadhyay, S., Katrapati, G., Shrivastava, M.: A survey of using large language models for generating infrastructure as code, March 2024"},{"key":"39_CR24","doi-asserted-by":"crossref","unstructured":"Lee, J., Kang, S., Ko, I.-Y.: An LLM-driven framework for dynamic infrastructure as code generation. In: Proceedings of the 25th International Middleware Conference: Demos, Posters and Doctoral Symposium, pp. 9\u201310. ACM, Hong Kong, Hong Kong, December 2024","DOI":"10.1145\/3704440.3704778"},{"key":"39_CR25","unstructured":"Zhang, T., Pan, S., Zhang, Z., Xing, Z., Sun, X.: Deployability-centric infrastructure-as-code generation: an LLM-based iterative framework, June 2025"},{"key":"39_CR26","doi-asserted-by":"crossref","unstructured":"Lupinacci, M., Blefari, F., Romeo, F., Pironti, F.A., Furfaro, A.: ARCeR: an agentic RAG for the automated definition of cyber ranges (2025)","DOI":"10.1007\/978-3-032-00630-1_2"},{"key":"39_CR27","doi-asserted-by":"crossref","unstructured":"Martinelli, F., Mercaldo, F., Petrillo, L., Santone, A.: Security policy generation and verification through large language models: a proposal. In: Proceedings of the Fourteenth ACM Conference on Data and Application Security and Privacy, Porto, Portugal, pp. 143\u2013145. ACM, June 2024","DOI":"10.1145\/3626232.3658635"},{"key":"39_CR28","unstructured":"GitHub - BPG\/terraform-provider-proxmox: Terraform\/OpenTofu Provider for Proxmox VE, June 2025"},{"key":"39_CR29","unstructured":"Asai, A., Wu, Z., Wang, Y., Sil, A., Hajishirzi, H.: Self-RAG: learning to retrieve, generate, and critique through self-reflection (2023)"}],"container-title":["Communications in Computer and Information Science","New Trends in Database and Information Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-05727-3_39","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,9,21]],"date-time":"2025-09-21T07:44:14Z","timestamp":1758440654000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-05727-3_39"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,9,22]]},"ISBN":["9783032057266","9783032057273"],"references-count":29,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-05727-3_39","relation":{},"ISSN":["1865-0929","1865-0937"],"issn-type":[{"value":"1865-0929","type":"print"},{"value":"1865-0937","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,9,22]]},"assertion":[{"value":"22 September 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ADBIS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Conference on Advances in Databases and Information Systems","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Tampere","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Finland","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"23 September 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"26 September 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"adbis2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/adbis2025.github.io\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}