Containment Assurance · Assessment Instrument v1
The Containment Audit
Sandbox & agent isolation — a verdict on whether the box actually holds
The Standard
The contained thing must never enforce its own containment. Every weak result below is a version of that single failure — filtering inside the process, cooperative limits, self-written logs, trust-based isolation. Sound containment is enforced from
outside the contained thing, default-deny, and witnessed by something the contained thing cannot touch. A boundary enforced by the inside is not a boundary — it is a request.