Subspace-based spectrum guarding