Network policies & exfiltration prevention

Isolation of code is only half the problem; an agent with legitimate credentials can
still exfiltrate data through allowed channels. Students learn to enforce network
policies that permit only approved destinations and to reason about the difference
between code-execution isolation and data-access control.