The potential scope of damage if a deployment, agent, credential, or integration fails. FDEs reduce blast radius by limiting write-back scope, using staged rollout, and enforcing least privilege.