Glossary
Quarantine
Quarantine sits between full trust and outright revocation. A principal or artifact under quarantine is prevented from taking further action, or from being relied on by anything else, while its status is investigated — without the system having concluded yet that it is actually compromised. That middle state matters because premature revocation has its own cost, and waiting for certainty before doing anything has a worse one.
A quarantine that a human has to remember to lift, or one with no defined review process, tends to become permanent by neglect or to be lifted by impatience before the investigation is actually done. A quarantine worth having comes with an explicit owner and an explicit next step, not just a flag that stops something.