that were not in the intended control sphere as implied by the source code.
A protection mechanism effectively defines (or enforces) a control sphere. This may be a
subset of the full control sphere for the software; for example, a protection mechanism
might only be used to sanitize data, not to perform authentication. A protection