9.2 Resource Limits

Description

Agent resource consumption MUST be limited to prevent DoS and runaway costs.

Rationale

Agents can consume unlimited resources through loops, large files, or API storms.

Audit Procedure

1. Check for resource limits in config
2. Verify cgroups/ulimit settings
3. Check for API rate limiting

Remediation

1. Set container resource limits
2. Implement API rate limiting
3. Set disk quotas and timeouts

Framework Mappings