Runtime and remediation

Work on the selected agent: review protection decisions, fix confirmed weaknesses and retest the exact control before closure.