I see. Very reasonable. The harness ensures that the tool calls are executed in a different user or cgroup. Nothing about the tool call requires it to be in the

I see. Very reasonable. The harness ensures that the tool calls are executed in a different user or cgroup. Nothing about the tool call requires it to be in the same space as the harness itself. Very simple solution and embarrassed I didn’t mention it. Thanks, Simon.