CLAUDE.md caps every compiled program's memory and time.

This commit is contained in:
Joseph Ferano 2026-09-26 18:50:13 +07:00
parent 5274f83f88
commit c82a3b79d6

View File

@ -31,6 +31,10 @@ has lied. `@checks` (`@page`, `@x86`, `@cells`), `@sanitize` and `@valgrind` are
slow and run only with the author's permission. ASan misses uninitialised stack slow and run only with the author's permission. ASan misses uninitialised stack
reads; `@valgrind` catches them. reads; `@valgrind` catches them.
Run any compiled program under a memory cap and a timeout, one at a time:
`timeout 60 systemd-run --user --scope -p MemoryMax=1G -q <cmd>`. A runaway once
pushed the author's machine 10 GB into swap.
## Evidence ## Evidence
Read the source, do not recall it — this repository and the reference clones Read the source, do not recall it — this repository and the reference clones