Index
Brief.

Tag

threat-model

  1. A hook is not a security boundary

    If the host is trusted, a governance contract can prove a deny. It cannot contain a host that never asks.