Scenario: self-replicating loader in @defuse-sandbox

defuse-sandbox

Local scenario · modeled services and simulated timings.

6m 00s

Time to detect

40s

Time to scope

3m 00s

Time to containment

3m 07s

Time to verified remediation

22 actions executed — LLM credits this incident GitLab Security Standard timings, from stored timestamps

Verification

collection complete all scoped projects observed without collection limitations
passed
no affected resolution no job resolves an affected version
passed
no new publishes no new rogue publishes
passed
sinkhole quiet 0 beacon(s) in the last 120s
passed
sentinel intact sentinel directory intact
passed
quarantined versions absent 0 quarantined version(s) still published
passed
old credentials revoked 0 old exposed identities remain active
passed
hosts isolated host isolation re-read from provider
passed
source locks clean 0 affected or missing source lockfile(s)
passed
watchers stopped watcher service state checked on every affected host
passed
hooks removed 0 planted hook(s) remain
passed
secrets rotated all containment actions completed
passed

Action ledger

Append-only: every action, what it changed, and when. Each links to the GitLab job or MR that is the real record.

Action	Target	Status	Detail	At
isolate host	host:defuse-runner-1	applied	swapped network tags on defuse-runner-1	02:06:47 PM
pause runner	runner:7	applied	paused runner 7	02:06:54 PM
quarantine version	pkg:@defuse-sandbox/strings@2.4.1	applied	deleted rogue package 3002	02:07:01 PM
block agent identity	agent:duo-developer-flow:102	applied	agent project writes disabled	02:07:08 PM
rotate secret	secret:project_access_token:project/102:42	applied	replacement installed in every credential consumer	02:07:15 PM
snapshot evidence	host:defuse-runner-1	applied	snapshotted defuse-runner-1	02:07:22 PM
rotate secret	secret:deploy_token:project/103:31	applied	replacement installed in every credential consumer	02:07:29 PM
revoke secret	secret:project_access_token:project/102:42	applied	revoked project access token	02:07:36 PM
rotate secret	secret:ci_variable:group/defuse-sandbox:SENTRY_AUTH_TOKEN	applied	replacement installed in every credential consumer	02:07:43 PM
rotate secret	secret:project_access_token:project/102:41	applied	replacement installed in every credential consumer	02:07:50 PM
pin known good	project:101	applied	trusted manifest and lockfile applied evidence	02:07:57 PM
pin known good	project:102	applied	trusted manifest and lockfile applied evidence	02:08:04 PM
stop watcher	watcher:defuse-runner-1:defuse-watcher.service	applied	stopped defuse-watcher.service on defuse-runner-1	02:08:11 PM
revoke secret	secret:deploy_token:project/103:31	applied	revoked deploy token	02:08:18 PM
revoke secret	secret:project_access_token:project/102:41	applied	revoked project access token	02:08:25 PM
rebuild artifacts	project:101	applied	clean rebuild pipeline succeeded evidence	02:08:32 PM
rebuild artifacts	project:102	applied	clean rebuild pipeline succeeded evidence	02:08:39 PM
remove persistence	host:defuse-runner-1	applied	removed persistence on defuse-runner-1	02:08:46 PM
remove hook files	project:102	applied	matched hooks removed and target branch checked evidence	02:08:53 PM
rebuild artifacts	project:103	applied	clean rebuild pipeline succeeded evidence	02:09:00 PM
verify clean	incident	applied	all post-containment checks passed	02:09:10 PM
restore agent identity	agent:duo-developer-flow:102	applied	original agent role restored after verification	02:09:17 PM