Security and Safety

CCDV-F · 16 questions

• A 311 agent receives pasted webpage text that might hide instructions. How should the team treat that input?
• A permitting pipeline must reduce injection risk from uploaded PDFs before Claude reads them. Which mitigation fits?
• A housing bot stores Claude transcripts in logs. Which privacy control fits?
• A school assistant can call student-record tools. Which access control fits?
• A court research agent is asked to ignore sealing rules via a jailbreak-style prompt. What defense fits?
• A public-health chatbot handles sensitive encounter details with Claude. Which confidentiality practice fits?
• A city wants safer resident chat around toxic content with Claude. Which guardrail design fits?
• A transit ops Claude tool connects to GTFS data. Which privilege model fits?
• A water utility connects Claude near plant systems. Which secure-by-design tool policy fits?
• A housing team wants to enable case-note summarization with Claude. Which go-live gate fits?
• A library public kiosk runs Claude for visitors. Which tool control fits?
• A court Claude app must stop unsupervised case-file deletes. Which hooks control fits?
• A 311 harness must stop Claude from running shell-exec during ticket triage. Which hooks control fits?
• A city must manage Claude API keys for production apps. Which secrets practice fits?
• A school district runs sandbox and production Claude apps. Which key separation fits?
• A housing ops team needs visibility into Claude-calling identities. Which monitoring practice fits?