0131da5b0d
G-1 resource-limit claims match mechanism (mem/cpu/fsize/wallclock kernel-enforced; per-sandbox pids + hard disk quota documented as accepted v0.3 gap, no cgroup/sudo) G-2 disk cap via manager workdir-size sweep (AI_SANDBOX_MAX_WORKDIR_MB, default 512MB) G-3 telemetry flood control: WS 1008 + INCOMPLETE_FLOODED trace (no silent drop-oldest) G-4 grader refuses gapped/incomplete traces (UNGRADABLE_TRACE_INCOMPLETE verdict) G-5 no-auth abuse control: per-learner caps + learner allowlist (ships despite KYC defer) G-6 release note discloses partial resource enforcement (P7 honesty) CUT-1 real server STT/TTS deferred to v0.4 (voice mock+browser-first) CUT-2 interactive xterm shell relay deferred to v0.4 (build panel = run/test + output) Advisories a-1..a-5 applied (startup reaper, RLIMIT_FSIZE, SQLite WAL, digest-gaming prompt note, variant fairness envelope) ---ci--- phase: 0 milestone: v0.3 status: grill ---/ci---