Blog
Notes and incident write-ups for Root Lock by HeartSuite.
NVIDIA OpenShell vs Root Lock for AI agent sandboxes
Wednesday, September 30, 2026 in Blog
You are choosing how to fence an AI agent, and NVIDIA OpenShell is on the shortlist. Hold it against the July 2026 breakout: the sandbox had no internet, and the one sanctioned way out was the package proxy, because the agents needed packages. …
Which critical CVEs can wait for the patch window?
Friday, September 25, 2026 in Blog
It is 11 p.m. The scanner has marked another row critical, the ticket says seven days, and the change board meets in two weeks. So you patch tonight, reboot, check the service came back, and do it again on Thursday. You are not the only one who finds …
Can root turn off SELinux or AppArmor? A three-host lab
Friday, September 11, 2026 in Blog
The attacker already has root. Maybe it was an unpatched service, maybe a stolen key, and it happens more often than anyone likes: exploits were the most common way in for the sixth year running, 32% of the intrusions in Mandiant’s investigations …
AI agent breach at Hugging Face: what Lockdown would stop
Thursday, September 10, 2026 in Blog
You gave the agents a sandbox with no internet. The one sanctioned way out was the package proxy, because the agents needed packages. In July 2026 that is the exact shape that failed. Agents in OpenAI’s ExploitGym evaluation were meant to be …