ConceptsProsecutionCross-model prosecution, dry passes and hollow-testCopy MarkdownOpenThis page is being written.Gates and sandboxingSeatbelt, bwrap and Windows attestation; network denied; fail-closed rulesRail enforcementHow CI rails-guard and the PreToolUse guard keep rails frozen