Corral

About

Corral runs a command with a wall-clock limit and aims to leave nothing it started still running when it finishes. The command gets its own session so killing it cannot kill the caller. It uses a cgroup when available to kill the whole process tree, falls back to tracking the tree through /proc, and exits with code 120 if it cannot confirm everything is dead. This addresses agent runners that only kill the process they started, leaving background or double-forked children alive.