Containment for AI agents - user isolation, sandboxed execution, network controls, backup/rollback. TLA+ verified.

Multi-harness control plane for Claude Code, Codex, Cursor, and OpenCode: quota-aware rotation across multiple Claude/Codex subscriptions, shared thread context, and cross-model review.