The architecture of subtraction: Why it’s time to erase the roads, not just map the traffic

The report argues that traditional patch-centric workflows are inadequate against AI-accelerated exploit generation and advocates a shift to "subtractive security"—using a Path Erasure Rate (PER) metric to prioritize architectural removal of entire classes of attack paths through host-level constraints (for example, blocking child-process launches from browsers, disabling legacy discovery protocols, and enforcing strict egress rules) and describes operational steps to implement these controls safely.