You Cant Sandbox Ambient Authority
You Can’t Sandbox Ambient Authority
Systems engineering, control theory, distributed systems
You Can’t Sandbox Ambient Authority
Distributed systems fail in two ways: the failure itself, and the system’s automatic response to the failure. The second is usually deadlier.