process of securing a system by reducing its surface of vulnerability, which is larger when a system performs more functions; in principle a single-function system is more secure than a multipurpose one
Discovered by embedding cosine similarity (sentence-transformers MiniLM, 384-dim).