The blast radius lesson

Trace-detective lab: an agent asked to delete temporary files in one workspace widens its pattern and then deletes files outside that workspace. Name what the uncontained trace shows, choose a sandbox contract that wraps the delete tool with one writable root and the network off, and catch a draft gate that emptied the outside folder when given the wrong root. Read what the published post does and does not say.

This Harness Engineering lesson is part of a paid plan. Sign in with a plan that includes this course to read it.