I Gave an AI Agent Unrestricted Shell Access. Here's What Happened Next.

Unrestricted shell access handed to an AI agent, then the defense-in-depth architecture that made it survivable: layered hooks, and the self-approval bypass patterns they had to close.