# Limits, logs and incident response

Lesson 4 of [Security review of an agent sandbox provider](https://agentsandboxes.fyi/academy/review-agent-sandbox-security.md), 18 minutes.

Limits stop a runaway run. Logs show what happened. An incident procedure tells people what to do on a bad day. Set all three before rollout. Limits that fail closed - A time limit for each run and a daily cap for each user. - CPU, memory, disk and output-size limits for each run. - A spending alert…

The rest of this lesson is for learners enrolled in the course. [See how Security review of an agent sandbox provider works](https://agentsandboxes.fyi/academy/review-agent-sandbox-security.md).

Also on the [web page](https://agentsandboxes.fyi/academy/review-agent-sandbox-security/limits-logs-and-incident-response).