Isolation Review

Purpose

Map all isolation boundaries in a system, enumerate every crossing point, verify enforcement mechanisms, and test for bypass paths that could allow privilege escalation or data leakage across trust domains.

Scope Constraints

Reads system architecture documentation, container/VM configurations, and security policies. Does not modify isolation configurations or execute active bypass tests. Does not access production environments.

Inputs

• System architecture with component boundaries
• Isolation mechanisms in use (containers, VMs, enclaves, process separation, namespaces)
• Trust domain definitions (which components trust which)
• Threat model (what attacker capabilities are assumed)
• Compliance requirements for isolation (e.g., PCI DSS network segmentation)

Input Sanitization

No user-provided values are used in commands or file paths. All inputs are treated as read-only analysis targets.