I01
Containment & Incident Response
WHAT IT ADDRESSES
No way to interrupt an agent once it has begun acting.
VERIFICATION METHOD
Execute the stop against a running task.
Five Eyes; OWASP T&M