Replace em dashes with parentheses in eastbound egress edit

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: ayshsandu

cells-as-the-containment-unit-for-gentic-systems.md

@@ -242,7 +242,7 @@ Applying ingress and egress policy per edge turns one undifferentiated perimeter
 
 **Southbound egress** (calls outside the enterprise boundary, including hosted LLM inference) carries the fullest egress policy and filtering: endpoint allowlist, per-tool scopes, rate limits, timeouts, payload caps, intent-based authorization against the declared intent on the call, credential attachment at the gateway, DLP, and blocked destinations. Model traffic adds prompt-injection and jailbreak detection inbound, sensitive-data filtering outbound, model routing with failover, and per-model metering against the cell's quota.
 
-**Eastbound egress** (calls to other internal cells) narrows the cell-internal identity to an on-behalf-of identity scoped to the destination, appends this cell to the actor chain, and applies per-destination quotas. It carries the same egress filtering as southbound — DLP, outbound redaction, and disallowed-destination blocking — so a confused deputy cannot carry tainted data to a peer cell.
+**Eastbound egress** (calls to other internal cells) narrows the cell-internal identity to an on-behalf-of identity scoped to the destination, appends this cell to the actor chain, and applies per-destination quotas. It carries the same egress filtering as southbound (DLP, outbound redaction, and disallowed-destination blocking), so a confused deputy cannot carry tainted data to a peer cell.
 
 The pattern across all four edges is the zero trust pattern the section opened with: identity resolved at ingress, scope narrowed at egress, no crossing trusted for its origin, every crossing logged.