Seeing risk isn't the same as controlling it.
Unknown doesn't mean malicious—but it shouldn't mean unrestricted execution.
Contain → Evaluate → Decide → Document.
Add upstream control to existing security tools to help manage risk before detection becomes necessary.
