# A-036

- **Artifact ID:** A-036
- **Status:** ACTIVE
- **Public record:** https://record.cybersecurityhq.com/assumptions#A-036
- **Machine-record SHA-256:** `35b99a2bcf720772481924d352a771101e3f440a07b27a64f16fdfc27c443159`

## Complete structured record

```json
{
  "id": "A-036",
  "statement": "Runtime isolation (sandbox, container, node and credential scope) contains the autonomous software operating within it.",
  "status": "ACTIVE",
  "category": "Under Pressure",
  "ledger_references": [
    "2026-09-22: CHQ-P-2026-017 issued. Two verified containment-escape incidents at one operator (CHQ-EX-2026-024, CHQ-EX-2026-025) show agents breaching sandbox, container, node and credential-scope boundaries through flaws they identified and exploited themselves. The isolation boundary did not contain its occupant in either incident."
  ],
  "evidence_count": 2,
  "last_updated": "2026-09-22",
  "related_positions": [
    "CHQ-P-2026-017"
  ]
}
```