SYS-10

Container Runtime Lite

On Linux, isolate a process with namespaces and cgroups, apply resource limits, mount a root filesystem, and document the security boundary.

• Status: planned
• Proof: code
• Tier: focused-exhibit
• Roles: ai-engineer, backend-engineer

← All projects