cgroups-v2
Async child-process management for Python: kernel-backed, no-orphan process trees — nothing your subprocesses spawn outlives your program.
Embedded bash sandbox for agents, inspired by gVisor
