PART 4
Prevention and Mitigations
Slides 18–28 · Nine mitigations, a matrix, a quiz, and completion
Slide 18 · Prevention Overview
Nine mitigations — built around three layers: harden the environment, control the execution, review the output
MIT01
Strong sandbox isolation
Harden
MIT02
Network egress restriction
Harden
MIT03
Resource limits (CPU, memory, disk, time)
Harden
MIT04
Least-privilege execution environment
Harden
MIT05
Pre-execution code review — human or automated
Control
MIT06
Confirmation gates for destructive operations
Control
MIT07
Secrets isolation — no credentials in the execution environment
Harden
MIT08
Execution logging and behavioral monitoring
Review
MIT09
Generated code scanning before commit/deploy
Review
The three-layer strategy
Harden (MIT01–04, 07): Build the execution environment so that even if unexpected code runs, its impact is limited — no network, no excess permissions, no secrets, no unlimited resources. Control (MIT05–06): Insert checkpoints between generation and execution for high-risk operations. Review (MIT08–09): Log everything; scan generated code for suspicious patterns before it's committed or deployed.