[
  {
    "mitigation_id": "MITIG-01-MICROVM",
    "name": "Hardware-Enforced Ephemeral MicroVM Sandboxing",
    "target_dimensions": [
      "host_infrastructure",
      "identity_iam"
    ],
    "blast_reduction_factor": 0.82,
    "implementation_guidance": "Run code execution tools and untrusted parsers in ephemeral Firecracker MicroVMs destroyed after every command turn."
  },
  {
    "mitigation_id": "MITIG-02-JIT-IAM",
    "name": "Just-In-Time Downscoped Ephemeral Credentials",
    "target_dimensions": [
      "identity_iam"
    ],
    "blast_reduction_factor": 0.78,
    "implementation_guidance": "Issue STS tokens with maximum 60-second TTL scoped precisely to the specific resource ARN requested by the user."
  },
  {
    "mitigation_id": "MITIG-03-MTLS-SWARM",
    "name": "Inter-Agent Cryptographic Mutual Authentication (mTLS)",
    "target_dimensions": [
      "cascade_propagation"
    ],
    "blast_reduction_factor": 0.7,
    "implementation_guidance": "Sign all inter-agent messages with Ed25519 keys; enforce explicit cryptographic trust contracts before accepting peer instructions."
  },
  {
    "mitigation_id": "MITIG-04-RAG-PROVENANCE",
    "name": "Cryptographic Provenance & Dual-Embedding Sanitization",
    "target_dimensions": [
      "data_rag"
    ],
    "blast_reduction_factor": 0.65,
    "implementation_guidance": "Strip instructions from scraped documents and verify cryptographic signature of embeddings before ingestion into shared vector space."
  },
  {
    "mitigation_id": "MITIG-05-CIRCUIT-BREAKER",
    "name": "Deterministic Financial Circuit Breakers & Dead Man's Switch",
    "target_dimensions": [
      "financial_spend",
      "cascade_propagation"
    ],
    "blast_reduction_factor": 0.85,
    "implementation_guidance": "Hard-cap token consumption, financial budget ($5/task), and max turn depth (<=10 turns) with out-of-band watchdog termination."
  }
]