v0.13.44: @newsroom.writer: application behaviour policies

Application behaviour policies: map an application the way we map an agent, so a site switched off for php2shell can come back with a known blast radius.

• The method. Reach, mandate, gap, barrier, footprint and blast radius, from footprint and blast radius, applied to an application: a remote code execution flaw hands the application's reach to anyone.
• Three policies. Behaviour is the map; decision says who accepts each open row; workflow says in what order.
• A worked example. An invented council website: ten rows, five cheap cuts, and a worst case reduced to defacement and the database's data.
• Bringing a site back. Patch, map, cut, name the signals, decide, restore, read the footprint.