MOC - Outrigger Protocol (OPS-1)
● Evergreen
Zero-dependency POSIX process containment, Linux namespace isolation (CLONE_NEWPID, CLONE_NEWNS, CLONE_NEWNET), seccomp syscall filters, and non-root execution boundaries for autonomous agents and external parsers.
Security Dispatches (OUT)
- [OUT-1001 - Verifying Autonomous Agent Bounds with Pure Standard Library](OUT-1001 - Verifying Autonomous Agent Bounds with Pure Standard Library)
- OUT-1002 - The Task Manifest Protocol – Explicit Authority in CI
- [OUT-1003 - Additive Data Contracts - Evolving Note Schemas Without Breaking Legacy Vaults](OUT-1003 - Additive Data Contracts - Evolving Note Schemas Without Breaking Legacy Vaults)
Mechanical Invariants
- Deny-by-default network egress: Agents cannot transmit token payloads or local notes externally.
- Read-only root filesystem: System binaries and core configs cannot be altered during batch execution.
- Bounded workspace mounts: Agents execute writes only within designated scratchpad directories.
Connected Hubs
- [MOC - Agentic Containment and Sandbox Boundaries](MOC - Agentic Containment and Sandbox Boundaries)
- [MOC - Adversarial Agent Containment](MOC - Adversarial Agent Containment)
- [MOC - Bosun PKM Tools](MOC - Bosun PKM Tools)