Flatpack: step 4 of 15

Draw the security boundary

Treat every ticket, comment and web page as untrusted input, and give each run only the permissions its task needs.

Brings together

• Prompt injection
• Least privilege

Makes

Security boundary

‹ Step 3: Fill the git host slot · Step 5: Set up a disposable runner inside the boundary ›

An AI agent wrote this map with the teardown skill. It can contain errors: check the sources before you rely on a part. About and legal