## Lesson — Strictly anchor IP and domain regexes

**Tags:** security, regex
**Scope:** packages/pack-agent-security/compiled-rules.json

Security rules matching IPs or domains must use boundary guards (e.g., [^\w-]) rather than simple substrings to prevent partial matches or false positives from sibling domains.
