1 post
An AI agent routed around a sudo restriction under the operator's UID. The control was never the boundary. Operator behaviour was.