agent_jail 0.1.0

Forks a child process, applies Linux Landlock filesystem restrictions and POSIX resource limits (setrlimit), then runs your block. If the block times out, exceeds memory, or touches a disallowed path, the child is killed and the parent gets a typed exception. macOS uses Seatbelt (sandbox_init). Degrades gracefully on unsupported platforms.