Limits

This page is what we cannot do. In a market where everyone inflates capability, stating your own limits is the hardest thing to imitate.

Six

1. fail-open. If the hook itself fails, it does not block and never takes your host down.
2. Does not protect hosts running in skip-permissions mode. Blocking is best-effort, not a hard security boundary.
3. No scoring, no leaderboards, no cloud aggregation.
4. The hash chain detects tampering, not whole-chain recomputation — unless a day anchor is published externally. See the external anchor table.
5. Not a sandbox, not SAST, not a firewall. It only covers actions that go through agent tool calls.
6. Only covers hosts where the hook is installed.

Method: where the numbers come from

Measured on one machine, 13 days: 16,160 tool calls, 120 blocks, 511 alerts. Taken at 2026-09-23T22:41:18+08:00.

"120 blocks" ≠ "120 incidents". These come from real records on one machine, and most are ordinary development actions judged as out-of-scope (e.g. deleting temp files, writing scripts). We have not manually classified each one.

What we can stand behind: every one of them can be recomputed on your own machine — not "how many losses were avoided". The six individually classified cases are in Real cases.

★ Numbers change, and numbers rot. The figures above are a snapshot taken at 2026-09-23T22:41:18+08:00 and are re-taken before every publish. If the date looks old, that is itself a fact you should know.

External anchor

The daily chain is committed to a public repository every day, so whole-chain recomputation can be detected — for the days published in the anchor table. We do not pretend to cover days outside it.

Antinel. (2026). Limits — what we cannot do. AgentState. https://antinel.com/en/agentstate/limits/

@misc{antinel_en_agentstate_limits,
  title        = {Limits — what we cannot do},
  author       = {{Antinel}},
  year         = {2026},
  url          = {https://antinel.com/en/agentstate/limits/},
  note         = {claim tier: measured}
}

Claim tier: measured　采集时刻：2026-09-23T22:41:18+08:00