As of Sep 28, Corral launched on Hacker News as a Linux CLI that keeps AI-started processes contained.
Corral runs a command with a time limit and, before it returns, verifies that every process the command started has exited, returning exit code 120 if it cannot prove that. Its developer built it for AI coding agents and CI jobs that leave behind background jobs, daemons or processes holding output open; it uses cgroup v2's cgroup.kill when it can and otherwise acts as a child subreaper. Version 0.1.0 needs Linux 5.11 or later and is not a security sandbox.
Items older than 72 hours never go in Top stories and show their original date.