CLAIM-2026-08-22-05

Access-revocation behaviours observed included sudo and group removal, account lock, nologin, and SSH denial.

Why it matters

These are exactly the privileges most teams hand an agent so it can fix its own environment.