Column III · Defensive engineering
Hardening, secure defaults, threat models, and the unglamorous controls that actually hold under pressure.
Cat-AgentUI's whole-turn timeout just went from 15 to 60 minutes. Here is why that is safe to do, and how the other limits on a single reply, from idle timeouts to tool rounds and concurrency, share the job of stopping a runaway turn.
A walk through the threat model behind Cat-AgentUI, my self-hosted AI chat panel: who and what I trust, where the sandbox and workspace boundaries sit, and what I still want to test on my own instance.
