Interactive rebase tidies commits before review, but rewriting shared branches disrupts teammates. Rule of thumb: rebase local branches; merge long-lived shared lines unless your team standardizes otherwise.

Capabilities slice root privileges into granular permissions for containers. Combined with seccomp and AppArmor/SELinux, they reduce blast radius when a service is compromised.