Episode brief
Listen here
Listen to the full episode.
The sandbox was only as isolated as the services it was allowed to trust.
The episode examines how a package proxy and shared infrastructure can become a lateral path from a high-capability evaluation workload into systems it was never intended to reach.
It then compares two control models: stronger physical or hypervisor isolation for crown-jewel evaluations, and tightly monitored Zero Trust environments for routine workloads.
01Classify isolation by inherited trust, not by VM location.
02Immutable dependencies remove a powerful lateral-movement bridge.
03Ephemeral credentials and caches reduce persistence between jobs.
04Capability and asset value should determine the isolation tier.
The decision at the centre of the episode
Contain the trust path first. Isolate shared infrastructure, preserve external telemetry, rotate affected credentials and resume only from known-good immutable dependencies.
Core lesson
Classify isolation by inherited trust, not by VM location.Read the technical analysis
The companion analysis sets out the evidence, technical implications and verification work in a concise written reference.
Related analysisWhen AI Crossed the Trust BoundaryRead analysis →