# Workstation Agent Safety

audience: AI coding agents first.

status: DONE
task IDs: #1, #5, #26, #27, #28, #33, #36
source requests: Prevent agent bugs, fork bombs, PID exhaustion, and automated recovery from freezing desktop or killing owner sessions.

## Delivered

- Git-guard/shim resolver fork-bomb class fixed and incident recorded.
- Agent cgroup/PID isolation installed.
- Owner human sessions placed in protected scopes.
- Kill logic targets exact cgroups, not process names.
- PID-cap breach handling verified in danger-lab (#110 follow-up).

## Durable evidence

Memories: `feedback_kill_by_cgroup_not_name`, `feedback_cap_pids_on_agent_scopes`, `project_2026-07-27_desktop_incident`, `feedback_never_test_dangerous_code_on_laptop`.

## Regression contract

Never kill by name; never test exhaustion on laptop/buildboxes; preserve owner `human.slice`; verify dangerous branches only in danger-lab.

## Current receipt

Installed protections remain active; current hot Claude processes were measured inside owner `human.slice` and were not killed.
