Fail Closed
A security design principle whereby a system denies an operation by default when it cannot confirm that the operation is authorized, as opposed to fail open.
Timeline (last 90 days)
The governed runtime adopts a fail-closed design: if the policy no longer allows that executor to resume, the run ends as failed with resume_denied before executing any step, writes a FlowFailed event to the hash chain, and notifies the user that resumption is no longer allowed.
All Two Sigma Agents run behind a proxy that only allows approved destinations; the proxy does not trust Agent code, adopts a fail-closed policy, and obtains each Agent's policy directly from the registry.
All Facts (2)
The governed runtime adopts a fail-closed design: if the policy no longer allows that executor to resume, the run ends as failed with resume_denied before executing any step, writes a FlowFailed event to the hash chain, and notifies the user that resumption is no longer allowed.
50%UnverifiedAll Two Sigma Agents run behind a proxy that only allows approved destinations; the proxy does not trust Agent code, adopts a fail-closed policy, and obtains each Agent's policy directly from the registry.
50%