SHarness · the one idea · v1, driven

SH4
One idea: a policy you can hash, a kernel that says no.

1. The policy, P1 (a coding agent's session)

read /usr and /work
write /work and /tmp
exec /usr and /lib
TCP 443 only
64 MB memory, no_new_privs
sha256:e619092574cc31d0...
2. One hash, one name: change one byte and it is a different name
3. The kernel is told before the tool starts: Landlock per path and port, a network namespace, rlimits, cgroups
4. The agent's tool, four requests
the wall (drawn by us)