GenPark AI Agent Skill - Process Cgroup OOM & CPU Quota Arbiter

Resource governor configuring Linux cgroup v2 controllers and arbitrating resource overconsumption, runaway loops, and fork bombs.

Verified by GenPark AI and compatible with Model Context Protocol (MCP).

Architecture Diagram

graph TD
    A[Sandbox Agent Code Process] --> B[cgroup v2 Controller Interface]
    B --> C[cpu.max Bandwidth Throttling]
    B --> D[memory.max OOM Tripwire]
    B --> E[pids.max Fork-Bomb Trap]
    C --> F{Resource Exceeded?}
    D --> F
    E --> F
    F -->|Yes| G[Pre-emptive SIGKILL / Container Terminate]
    F -->|No| H[Execution Continues Smoothly]

Features

• Fork Bomb Neutralization: pids.max boundary prevents exponential process cloning attacks.

• Deterministic Memory Bounds: Guarantees agent scripts do not induce host kernel memory exhaustion.

• Zero External Dependencies: Pure Python standard library implementation.