The Three-UID Containment Pattern for AI Agents on Linux

A correct AI agent containment model on a Linux workstation needs three Linux UIDs, not two. Two UIDs has a hole. The hole is structural, not a configuration mistake. This post shows the three-UID model with a working nftables chain, the wrapper script that drops the agent process into the right ide