From 4f1ac5b8f14b160ac7f88873c82b88c5a6d9283c Mon Sep 17 00:00:00 2001 From: jessikitty Date: Mon, 6 Jul 2026 18:53:01 +1000 Subject: [PATCH] Add RAM guard package: host safeguard + rate-limited addon watchdog --- ram_guard.yaml | 1 + 1 file changed, 1 insertion(+) create mode 100644 ram_guard.yaml diff --git a/ram_guard.yaml b/ram_guard.yaml new file mode 100644 index 0000000..a23a427 --- /dev/null +++ b/ram_guard.yaml @@ -0,0 +1 @@ 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 \ No newline at end of file