# M-10 — Isolation Levels & Blast Radius
# Category: MUST
# Kapitel: 18 – Security für Coding-Agents
# Anker: Runtime-Isolation begrenzt Blast Radius (Stufen 0–4: Host → Dev Container → Hardened Docker → OS-Sandbox → microVM)
# Orientierung: 16:9 landscape
# Didaktik: Höhere Isolation verkleinert Schaden bei Injection/Fehlbedienung; Stufe zählt mit Controls.
# Caption (DE): Höhere Runtime-Isolation verkleinert den Blast Radius — Host ohne Grenze ist der teuerste Default.
# Ziel-Asset: assets/illustrations/M-10-isolation-blast-radius.jpg
# Language: English (Gemini / Imagen)
# Usage: paste entire prompt body below into Gemini

--- PROMPT START ---
Create a technical security diagram, 16:9 landscape, for a professional practice book chapter on coding-agent isolation and blast radius.

TOPIC: Isolation levels vs. blast radius — damage radius shrinks as isolation hardens.

GLOBAL STYLE:
- clean modern high-contrast infographic; risk red (#DC2626) → amber → teal → sweet-spot green (#16A34A)
- navy/slate structure; off-white background; flat vector; print grayscale-safe
- minimal English labels; no brand logos; no mascots; no neon cyberpunk

QUALITY GUARDRAILS:
- every visible word correctly spelled English; max ~12 short labels total
- no vendor sandbox product names as hero; generic terms only
- no fake exploit screenshots

Title text exactly: "Isolation levels & blast radius"
Subtitle: "limit damage when things go wrong"

FIVE STAGES 0–4 left → right (ascending isolation strength, matches Kap. 18.3 table):

0. "Host"
   - largest red blast-radius circle
   - note: "full user · home · creds"

1. "Dev Container"
   - large amber circle
   - note: "remote workspace"

2. "Hardened Docker"
   - medium teal circle
   - note: "limited mounts · no socket"

3. "OS sandbox"
   - smaller blue circle
   - note: "Seatbelt · bubblewrap"

4. "microVM"
   - smallest green circle
   - note: "gVisor · Kata · Firecracker"

VISUAL RULE:
- blast radius drawn as expanding/shrinking circles under or around each stage
- circles clearly shrink left → right
- optional tiny footnote label: "strength depends on mounts & secrets"

MOOD: serious but calm security chapter figure — pragmatic, not fear marketing.
ASPECT: 16:9.
NEGATIVE: no neon, no skulls, no hacker stereotypes, no watermarks, no vendor logos, no German labels, no long policy paragraphs.
--- PROMPT END ---

# Follow-up edit:
# Keep five stages 0–4 with clearly shrinking blast circles. microVM = smallest green radius.
