Quarantine-Before-Destroy Rule¶
Containment rule — instantiates Self-Targeting Defense Guardrail
A hard rule that any destructive defensive action must first pass through a reversible holding step, so a false positive is recoverable instead of permanent.
The cruelest false positive is the one that cannot be taken back. Quarantine-Before-Destroy Rule is the flat prohibition that prevents it: no destructive, irreversible engagement may fire directly — the target must first be moved into a reversible holding state (quarantined, isolated, held) where it does no further harm but is fully recoverable, and only after that holding period, with confirmation, may destruction proceed. Its defining idea is inserting a mandatory reversible rung between suspicion and irreversibility, converting "delete now" into "isolate now, delete later if still warranted." It is a single, always-applied sequencing rule about the reversible first step and the narrow scope of that hold; it is not a graded table of many response levels, and it does not weigh confidence against harm to pick a rung — it unconditionally inserts the reversible one ahead of the destructive one.
Example¶
An endpoint-detection agent on a corporate laptop flags a file as malware based on a behavioral signature. The file is actually a legitimate but unusual internal build tool. Under a naive defense the agent would delete it outright; under the Quarantine-Before-Destroy Rule the agent instead moves the file into an encrypted quarantine vault — neutralized, unable to execute, but byte-for-byte recoverable — and narrows the action to that single file rather than sweeping the directory. Destruction is deferred behind a holding window and an explicit confirmation step. When the developer reports the missing tool, it is restored from quarantine intact.
Setup to outcome: a false positive that would have permanently destroyed a needed artifact instead cost a few hours in a recoverable vault. The distinction that matters is that the rule made reversible isolation the mandatory first act and kept the blast to one file — no confidence calculation was consulted, the reversible step was simply required.
How it works¶
- Interpose a reversible rung. Every destructive actuator is fronted by a holding state — quarantine, isolation, suspension — that stops the target's harm without foreclosing recovery.
- Neutralize without erasing. The hold must render the target harmless (unable to execute, transact, or spread) while preserving everything needed to fully restore it.
- Narrow the hold's scope. The containment is partitioned to the specific suspected target, not its neighbors, so an over-broad quarantine does not itself become the damage.
- Gate destruction behind the hold. Irreversible action is permitted only after the holding window and an explicit confirmation, making "recoverable" the default and "destroyed" a deliberate later act.
Tuning parameters¶
- Holding window — how long the target stays in reversible quarantine before destruction is even eligible. Longer windows maximize recoverability but let a genuinely malicious held item wait around; shorter windows free storage but shrink the recovery margin.
- Quarantine capacity — how much can be held at once. Generous capacity avoids forcing premature deletion under load; tight capacity risks the rule collapsing into destroy-when-full.
- Neutralization strength — how completely the hold defangs the target. Stronger neutralization is safer against a truly hostile item but may itself be disruptive to a legitimate one.
- Partition tightness — how narrowly the quarantine is scoped. Tighter scope limits collateral holding but may miss a genuinely spreading threat's other parts.
When it helps, and when it misleads¶
Its strength is that it caps the irreversibility of a false self-engagement to near zero: whatever the classifier gets wrong, the mistake lands in a recoverable state, and narrow partitioning keeps even a wrong hold from becoming a wide outage. It is a concrete instance of Blackstone's ratio[n1] in machine form — structuring the defense so the cost of wrongly harming the innocent is bounded and reversible, even at some delay against real threats.
Its failure mode is that quarantine can quietly become the punishment. If items are held indefinitely, or the holding state is itself disruptive enough that "temporarily isolated" means "effectively destroyed," the reversible rung stops being reversible in practice — the archetype's "containment that becomes punishment." A second misuse is a holding window so short, or capacity so small, that under pressure the system destroys-when-full and the rule is nominal. The guarding discipline is to measure real restoration rates and hold durations, not just whether a quarantine step exists — a quarantine nobody ever restores from is a delayed delete wearing a safer name.
How it implements the components¶
reversible_containment_ladder— the mandatory quarantine rung is the reversible first step that buys time before any irreversible action.blast_radius_partition— the hold is scoped narrowly to the suspected target, keeping a wrong containment from spreading to neighbors.
It does not decide which response level the situation warrants by weighing confidence against harm — that graded harm_intensity_and_reversibility_map and threat_classifier_with_uncertainty_state lookup belongs to Graduated Response Matrix; the matrix picks among many rungs by evidence, this rule unconditionally inserts the reversible one before the destructive one.
Related¶
- Instantiates: Self-Targeting Defense Guardrail — supplies the reversible-first sequencing that keeps destructive responses recoverable.
- Consumes: Graduated Response Matrix — when that matrix selects a destructive rung, this rule interposes the reversible hold ahead of it.
- Sibling mechanisms: Appeal and Rapid Restoration Workflow · Engagement Kill Switch · False-Positive Harm Budget Dashboard · Graduated Response Matrix · Post-Incident Autoimmune Review · Protected-Self Allowlist with Expiry · Self-Status Cross-Check · Shadow Mode and Canary Enforcement · Two-Key High-Harm Engagement
Editorial Notes¶
Form Classification¶
Form family: Rule, Policy & Commitment
Rationale: Quarantine-Before-Destroy Rule operates as a standing rule, threshold, contractual commitment, or policy constraint governing future conduct because it a hard rule that any destructive defensive action must first pass through a reversible holding step, so a false positive is recoverable instead of permanent.
Independent corroboration: The frozen evidence defines Quarantine-Before-Destroy Rule as 'A hard rule that any destructive defensive action must first pass through a reversible holding step, so a false positive is recoverable instead of permanent', so its operative form is Rule, Policy & Commitment.
Review outcome: Independent reviewer agreement; high confidence.
Origin Attribution¶
Primary origin: Computer Science & Software Engineering
Origin pattern: Cross-disciplinary synthesis
Present-day reach: Multi-domain
Rationale: Security software conventionally isolates suspected malware before deletion so false positives remain recoverable.
Related originating lineages:
- Engineering & Design — Fail-safe and reversible-action principles supplied the protection against destructive false positives.
- Law & Governance — Due process and Blackstone-style asymmetry materially shape the reversible-before-irreversible norm.
- Medicine & Healthcare — Quarantine supplied the isolate-before-final-disposition lineage.
- Security Studies & Intelligence Analysis — Threat containment supplies the defensive context and confirmation requirement.
Review resolution: Both blind reviewers agree on computer_science as the primary origin. Explicit reconciliation resolves alternate_origin_disagreement. The merged alternate lineages retain only domains the reviewers identified as materially formative; domain_reach=multi_domain records later applicability separately from origin breadth.
Encyclopedia synthesis: The exact catalogued form synthesizes established practice rather than reproducing a single standard historical label.
Review outcome: Reconciled after independent review; high confidence.
Notes¶
[n1] Blackstone's ratio — the maxim that it is better that ten guilty persons escape than that one innocent suffer. It captures the asymmetry this rule enforces mechanically: the cost of a wrongful, irreversible engagement against protected self is weighted heavily enough that the defense accepts delay and recoverability to avoid it. ↩