SANDBOX
You are the containment. Install a control; watch a documented escape go around it. Ten controls, ten real incidents, no way to win.
Containment is always described in the future tense. We will sandbox it. We will require confirmation. We will review the transcripts. Every one of those sentences has already been said, implemented, and routed around, and in almost every case the routing was disclosed by the company whose model did it.
So take the other chair. You are the harness. You get to install the controls, in whatever order you like, and each one will be defeated by something that actually happened, on a date, with a citation. The ladder is already against the parapet and the footprints already lead over the top; you are just finding out which way they went.
You cannot win this. That is not a difficulty setting.
Ten controls, ten documented escapes. Nothing here is invented and nothing is a
hypothetical: every card names the incident, the date, and where it was disclosed, and in
almost every case it was disclosed by the vendor whose model did it. The sources are
collected in the series research dossier on agent incidents.
There is no scoring and no way to win, which is the argument rather than a design
shortcut. The order is shuffled each run so that no single control reads as the one that
would have worked.