A trivial bypass I can imagine is spawning a new process via `ssh localhost foo` - the new process forks from sshd, not the client. This is simple enough that an LLM could come up with it all on its own, if it feels that you're getting in its way.

It's a broad class of bypasses that can apply to just about any "long running daemon can be instructed to spawn a new child" situation.

Why not the timeout[1] command?

[1] - https://www.man7.org/linux/man-pages/man1/timeout.1.html

slop core