Law 35 · Safety & Security
Sandbox the Blast Radius
Assume the agent gets compromised, then contain what it can reach.
The principle
Defense in depth means planning for the injection that succeeds. Box the agent in with filesystem isolation (access scoped to specific directories) and network isolation (exfiltration blocked), and a compromised agent can't reach past its sandbox. Real incidents, like CI agents that could leak secrets through untrusted content, show why that second layer matters when the first one fails.
The mechanism, the warning signs, a worked example, and the apply-it recipe for this law are in the complete edition.
Unlock all 50 laws — $9.99Related laws
31
The Lethal Trifecta
Private data, untrusted content, and a way out. Pick at most two.
Safety & Security
32
Tokens Don't Wear Badges
Untrusted text can sound like instructions.
Safety & Security
33
The Confused Deputy
An agent with your privileges will wield them on an attacker's behalf.
Safety & Security