Your Agent's Shell Allowlist Is Bypassable

Tue, 29 Sep 2026 20:30:00 -0700

Every shipmates crew member runs shell commands. Before any of them runs, it goes through a permission gate. The gate uses the same rule syntax as Claude Code settings: Bash(git status), Bash(rm *), Write(**/.claude/settings.json). The rules are merged from several layers:

a fleet-wide deny list pushed from Fleet Command
per-persona policy files
project settings
the Brig, which compiles shipmates’ fifteen “Ship’s Articles” into deny and ask rules

Deny beats ask, ask beats allow.

A 1 TB Test: Building a Memory Watchdog for go test

Tue, 22 Sep 2026 20:48:00 -0700

On August 16th a server.test.exe from shipmates climbed to roughly 1 TB of commit charge on my Windows workstation. Windows Terminal was hosting several agent sessions in tabs. It hard-faulted with E_OUTOFMEMORY, and every one of those sessions died at the same moment. It wasn’t the first time either. An earlier one hit about 236 GB through an infinite filepath.Dir loop.

The machine has 128 GB of RAM. Commit charge doesn’t care. It’s backed by the page file, and Windows will happily let a process reserve-and-commit until the commit limit is gone. Then everything else on the desktop starts failing allocations too.

Powershell on Luther Monson

Your Agent's Shell Allowlist Is Bypassable

A 1 TB Test: Building a Memory Watchdog for go test