Security Engineering Failure Modes

Failure	Earliest evidence	Immediate containment	Durable repair
Broken object authorization	cross-tenant negative test	disable affected operation	centralized subject-object-action policy
Credential compromise	anomalous identity use	revoke and isolate	short-lived identity and detection
Host/workload escape	unexpected privilege or flow	quarantine workload/node	layered runtime and platform policy
Supply-chain tampering	provenance/admission failure	stop promotion and revoke	isolated build, verified provenance
Missing telemetry	investigation gap	preserve available sources	threat-linked durable logging
Unsafe recovery	unknown image or persistence	pause restoration	known-good rebuild and validation
Expired exception persists	policy evidence	block or reauthorize	automatic expiry and fitness function

Every event records impact, scope confidence, decisions, owners, communication, remediation, regression, residual risk, and review date.