A Containment Escape rule has been added in auto mode, so sensitive operations such as cloud metadata credential retrieval, outbound traffic evasion, and cross-tenant access are no longer automatically approved unless the environment is explicitly marked as expected behavior.