Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions docs/specs/APP_ISOLATION.md
Original file line number Diff line number Diff line change
Expand Up @@ -279,6 +279,8 @@ Used for:

Apps run with **no cgroup cap by default** and may burst above their recommendation. Peaks should complete fast, not be throttled. CPU in particular is **never capped** — it's time-shared, so a CPU-hungry app simply runs slower and harms nothing; throttling it only makes it feel needlessly sluggish.

> **Hosted profile exception.** On the hosted (cloud) profile, CPU *is* capped per instance. See `ENVIRONMENT.md` # Per-instance resource limits for the hosted profile's cgroup CPU capping.

### Control-plane protection (structural, not a cap)

"Default unlimited" leaves one hole: a runaway app exhausting RAM could trip the kernel OOM-killer and take down the *brain*, removing the very UI the user needs to fix it. Closed structurally, independent of any app limit:
Expand Down