# Developer device security: isolate experiments from production authority

Source: https://www.web3sec.news/blog/developer-device-security-runbook
Updated: 2026-11-08

Assign owners and record supporting evidence in your team's own system.

- [ ] Inventory credentials and sessions available to each privileged laptop.
- [ ] Verify installed updates and required restarts.
- [ ] Separate external code execution from production access.
- [ ] Test workspace and credential isolation using dummy secrets.
- [ ] Revoke reachable authority and rebuild cleanly after confirmed compromise.

## References
- [Apple: secure software updates](https://support.apple.com/guide/security/secure-software-updates-secf683e0b36/web)
- [Apple: background updates in macOS](https://support.apple.com/en-la/101591)
- [Apple: signed system volume security](https://support.apple.com/en-gb/guide/security/secd698747c9/web)