resilience

An AI system's behaviour lives in more places than its code. The scored answer versions every one of them together, so you can return to a known-good state in minutes after a bad change or a poisoning.

EDR sees so much because it runs with so much privilege. On 19 July 2024 that privilege turned one bad content file into millions of crashed Windows machines. The answer covers both halves.

Having backups is not the control; having backups an attacker with admin rights cannot delete, and restoring from them on schedule, is. The scored answer designs for both.

Separate false-information spread, borrowed authority and runaway work. Put shared limits and stop checks at the propagation paths, then recover without repeating completed effects.

Define what the stop control guarantees at admission and commit. Include queues, retries, accepted actions and a separately authorized restart.