Containment Playbook Library

Ten containment plays for isolating a rogue agent — session freeze, credential revocation, egress cut, and safe release.

A 7-page library of ten detailed containment plays for isolating a rogue agent without taking down the fleet — session freeze, credential revocation, retrieval-source quarantine, egress cut, fleet pause, rollback, and more. Each play comes with steps, verification, and safe-release criteria, including snapshotting transcripts and tool-call logs for forensics. For incident responders and platform teams. Guidance only, not a substitute for professional security review. From ghostcorpnet (IncidentLattice).