>> Systems should be isolated from each other unless there is an overwhelming need for them to be connected and everything And we should have checks built into

>> Systems should be isolated from each other unless there is an overwhelming need for them to be connected and everything And we should have checks built into the build pipelines and checksum the files that go into the build. We have Merkle trees for a long time. I think, it would be possible to detect injected code.