top of page
NPW Agentic AI Control Catalogue 3.0.0
BR18
Action Bounding & Blast Radius
Code execution sandboxes must have no network egress except to destinations on the sandbox allowlist.
WHAT IT ADDRESSES:
Generated or injected code exfiltrates data or downloads payloads from inside the sandbox.
IMPLEMENTED AT:
Platform
This page publishes the control statement only. Other useful information, including verification methods, mapping to common AI governance frameworks, and applicability to your agents, is available through NPW consulting engagements.
Control statements of the NPW Agentic AI Control Catalogue 3.0.0 © 2026 New Pacific Way Ltd. are licensed under CC BY-SA 4.0. You may share and adapt them with attribution, under the same licence.
bottom of page