Plimsoll runs agent-written code, and every result states the isolation tier it actually got
A self-hosted Go daemon that runs untrusted code, including code an AI agent wrote, and reports the isolation tier each run actually got — process, container, kernel or vm — refusing a run below the caller's stated floor before any code executes.