You don’t! You make the system around it refuse for unwanted data behavior. Weir is that verification layer, so data class X never reaches sink Y. The complia

You don’t! You make the system around it refuse for unwanted data behavior. Weir is that verification layer, so data class X never reaches sink Y. The compliance is the layer that comes afterwards :)