Notes

What building a sandbox for agent-written code turned up, with the measurements.

• Docker accepts --pids-limit under every runtime. Not every runtime enforces it.
  2026-10-11 · The same --pids-limit 64 test under runc, gVisor and Kata Containers: runc enforced the 64, gVisor's container died after 14 processes, Kata started all 200. How to prove a process limit where it is enforced.