YOUNES_BAGHOR/31st Belgium NLP Meetup
Blog & Articles→StageGitHubBook Meeting

Containing "Agent Sprawl"

A Package Manager for Autonomous Coding Agents

Younes Baghor
Fractional Head of AI & Enterprise Systems Architect
Founder, Sprawl.software

31st Belgium NLP Meetup · Ghent · October 8, 2026

Sprawl Software | sprawl.software | Younes Baghor
SPRAWL.software | 31st Belgium NLP Meetup (Ghent)

Room Calibration: A Quick Show of Hands

Three quick questions before we dive into architecture:

  • 1. Daily Tooling
    Who is using Cursor, Claude Code, Copilot, or CLI agents daily in active codebases?
  • 2. Rule Fragmentation
    Who has copy-pasted prompt rules or .cursorrules across multiple repositories, wikis, or Slack?
  • 3. Blast Radius
    Who has had an agent run in an unexpected loop, submit a bloated 1,000-line PR, or touched sensitive files?
Sprawl Software | sprawl.software | Younes Baghor

"We were promised 10x engineering velocity. In production, we inherited uncontained chaos."

THE MONDAY MORNING CRIME SCENE

Sprawl Software | sprawl.software | Younes Baghor
SPRAWL.software | 31st Belgium NLP Meetup (Ghent)

The Crime Scene: Blast Radius

In production without boundaries, autonomous agents thrash and burn capital.

  • 2x Git Code Churn: Refactoring collapsed across AI teams (GitClear, 150M+ LoC).
  • The $640 Loop Tax: Autonomous agents thrashing overnight on failing unit tests.
  • Senior Dev Fatigue: 50% of architect time lost reviewing hallucinated PRs.

"Raw velocity without runtime containment is just automated technical debt."

Sprawl Software | sprawl.software | Younes Baghor
SPRAWL.software | 31st Belgium NLP Meetup (Ghent)

The Lens: Systems Architecture in the AI Era

Why I obsess over containment, sub-4ms boundaries, and deterministic runtimes:

  • 1. 15+ Years in Systems Architecture
    Hard engineering background in distributed infrastructure, Linux environments, enterprise data platforms, and mission-critical logistics.
  • 2. Fractional Head of AI
    Embedded inside active enterprise engineering fleets (60+ developers). Transitioning engineering teams from shadow AI chaos to governed velocity.
  • 3. Zero Fluff, Zero Dependencies
    I do not treat agents as conversational chatbots. I treat them as untrusted, high-privilege subprocesses that require strict POSIX-level containment.
Sprawl Software | sprawl.software | Younes Baghor

"AI adoption is not a prompt writing problem. It is an unmetered, uncontained runtime risk."

THE EXECUTIVE REALITY

Sprawl Software | sprawl.software | Younes Baghor
SPRAWL.software | 31st Belgium NLP Meetup (Ghent)

What I Tell the C-Suite: Unconstrained AI is Expensive

Leadership sees a €20/month seat license. The balance sheet sees a triple-cost bleed:

  • 1. The Token Drain
    Agents re-inject 80,000 tokens of dead repository context on every prompt. Resolving a single syntax bug costs $40 in model calls.
  • 2. The Velocity Paradox
    When senior engineers spend half their week cleaning bloated, hallucinated agent code, overall shipping velocity collapses.
  • 3. The Audit Blockers
    Agents reading ~/.ssh or traversing .env files fail DORA, SOC2, and EU AI Act reviews, stalling enterprise contract signatures.
Sprawl Software | sprawl.software | Younes Baghor
SPRAWL.software | 31st Belgium NLP Meetup (Ghent)

Why Cloud Gateways Fail on Laptops

Corporate network proxies cannot secure developer endpoints.

  • SSL Pinning: Cursor & Claude Code ship native daemons that reject MITM proxies.
  • Local Blindness: Cloud proxies only see HTTP traffic after disk reads occur.
  • Local Exfiltration: Secret leaks happen on the laptop before packets are sent.
Sprawl Software | sprawl.software | Younes Baghor

"The security leak happened on the developer laptop before the network packet was sent."

THE LOCAL ENDPOINT TRUTH

Sprawl Software | sprawl.software | Younes Baghor
SPRAWL.software | 31st Belgium NLP Meetup (Ghent)

What I Tell Developers: Remember 1995?

How we managed code dependencies in 1995 is how we manage AI instructions today.

  • 1995: "Tarball & ZIP" Hell
    Raw zip files dumped in C:\libs. Conflicting headers, DLL hell.
    The Fix: We introduced package managers, deterministic manifests, and lockfiles.
  • 2026: "Prompt Folklore" Hell
    Copy-pasting markdown prompts from Slack into .cursorrules. Rules drift across 40 microservices.
    The Fix: A Package Manager for Context (.agents/DNA.json).
Sprawl Software | sprawl.software | Younes Baghor

"Treat your AI context, rules, and skills like version-controlled infrastructure."

THE PARADIGM SHIFT

Sprawl Software | sprawl.software | Younes Baghor
SPRAWL.software | 31st Belgium NLP Meetup (Ghent)

The Core Concept: What is Sprawl DNA?

Central GitOps Repository · Local Workstation Validation

Central Git Repository (DNA Hub) · Multi-Workstation Distribution · Local CLI Validating & Fencing Each Device

Sprawl Software | sprawl.software | Younes Baghor
SPRAWL.software | 31st Belgium NLP Meetup (Ghent)

A Package Manager for Context

Deterministic manifests, modular capabilities, and universal compilation.

  • 1. Declare (DNA): Version rules, skills, and personas in .agents/ via Git.
  • 2. Lock (Perimeter): Sub-4ms path validation locks tools to repository root.
  • 3. Compile (Adapters): 1 command synthesizes .cursorrules, CLAUDE.md, Copilot.
Sprawl Software | sprawl.software | Younes Baghor
SPRAWL.software | 31st Belgium NLP Meetup (Ghent)

Workstation Boundary Containment

Lock down AI tools at the stdio and filesystem layer: sub-4ms in-memory path validation.

Sovereign Local Host · Stdio MCP Conduit · Sub-4ms In-Memory Path Traversal Fencing

Sprawl Software | sprawl.software | Younes Baghor

"The model is not expensive: injecting 100,000 tokens of dead repository noise is."

CONTEXT CLAMPING FINOPS

Sprawl Software | sprawl.software | Younes Baghor
SPRAWL.software | 31st Belgium NLP Meetup (Ghent)

Slashing the Token Tax: Context Clamping

Transition from unmetered cloud invoices to deterministic unit economics.

  • The 80k Token Drain: Re-injecting dead repo context costs $40 per syntax bug.
  • Subtree Clamping: Surgical context boundaries cut prompt spend by -74%.
  • Task Attribution: Local SQLite telemetry reconciles spend to merged PRs.
Sprawl Software | sprawl.software | Younes Baghor
SPRAWL.software | 31st Belgium NLP Meetup (Ghent)

GitOps Fleet Sync: Zero Drift

Solving policy divergence across 40+ microservices simultaneously.

  • The 40-Repo Drift Trap: Guidelines change, but local prompts silently diverge.
  • Central DNA Hub: Single source of truth versioned in your governance repo.
  • One Fleet Push: sprawl ws push syncs 42 microservices in seconds.
  • Pre-Commit Doctor: Automated gates block prompt and security drift in CI/CD.
Sprawl Software | sprawl.software | Younes Baghor

"You do not need heavy cloud virtualization. You need software packaging at the developer endpoint."

THE SOVEREIGN PRINCIPLE

Sprawl Software | sprawl.software | Younes Baghor
SPRAWL.software | 31st Belgium NLP Meetup (Ghent)

Field Results: The 60-Developer Fleet

Hard data from an enterprise engineering fleet running governed runtimes:

  • -74%
    Token FinOps
    Immediate reduction in total prompt token spend within 14 days via surgical subtree clamping and loop boundaries.
  • 2x
    PR Review Speed
    Senior engineers spend half the time untangling hallucinated pull requests. Team shipping velocity restored.
  • 100%
    Compliance Clearance
    Zero credential exfiltration incidents. Full audit attestation for DORA, SOC2, and EU AI Act Art. 14 reviews.
Sprawl Software | sprawl.software | Younes Baghor
SPRAWL.software | 31st Belgium NLP Meetup (Ghent)

60 Seconds to Containment

From uncontained shadow AI chaos to locked runtime in four simple commands:

  • 1. INSPECT
    Clean repository inspection. No guardrails, prompts unversioned.
  • 2. GRAFT (< 800ms)
    sprawl graft mounts .agents/ DNA & locks root directory.
  • 3. BIND
    sprawl bind compiles .cursorrules, CLAUDE.md, Copilot.
  • 4. VERIFY
    sprawl doctor validates directory perimeter. 100% PASS.
Sprawl Software | sprawl.software | Younes Baghor

"Let's see it live."

LIVE WORKSTATION & TELEMETRY DEMO (2 MINUTES)

Sprawl Software | sprawl.software | Younes Baghor
SPRAWL.software | 31st Belgium NLP Meetup (Ghent)

The Living Cockpit: Visual Governance

Local-first observability and agent capability mapping without cloud lock-in.

  • Live Capability Mapping: Visual tree of active rules, skills, and tools.
  • Perimeter Health Checks: Real-time verification of filesystem lock status.
  • Zero Cloud Leakage: 100% rendered locally from workstation telemetry.

"Total visibility over your AI workforce, running entirely on developer hardware."

Sprawl Software | sprawl.software | Younes Baghor
SPRAWL.software | 31st Belgium NLP Meetup (Ghent)

Zero Dependencies. Sub-4ms Latency.

Built strictly with the Python Standard Library. Runs natively on developer endpoints.

  • < 4ms Interception
    Normalizes file paths in-memory before the operating system kernel executes them. Zero autocomplete latency.
  • 0 Dependencies
    No compiled C extensions, no Node.js runtime, no 4GB Docker virtual machines spinning laptop fans. Pure Python 3.10+.
  • 100% Sovereign Privacy
    Local-first execution. 100% of telemetry, logs, and token auditing stay behind your corporate firewall.
Sprawl Software | sprawl.software | Younes Baghor
SPRAWL.software | 31st Belgium NLP Meetup (Ghent)

The Business Calculus

  • Uncontained Shadow AI
    • Exploding Invoices: $800 - $3,500 / month per dev
    • Code Churn: 2x increase while refactoring collapsed
    • Credential Risk: Blind traversal of ~/.ssh and .env
    • Configuration Drift: Prompt rules drift across 40 repos
    • Audit Blockers: Fails DORA, SOC2 & EU AI Act
  • Governed Package Runtime
    • -74% Token FinOps: $150 - $400 / month per dev
    • Refactor Health: Senior engineers stop playing janitors
    • Zero Exfiltration: Directory-locked stdio MCP sandbox
    • GitOps Fleet Push: 1 command syncs 42 repositories
    • Audit Clearance: Cryptographic logs & full compliance
Sprawl Software | sprawl.software | Younes Baghor
SPRAWL.software | 31st Belgium NLP Meetup (Ghent)

Two Sovereign Paths Forward

Stop building fragile monoliths on raw conversational prompts.

  • For Builders & Developers: The Open Source CLI
    Treat your context like packages tonight. Free forever, zero dependencies, sub-4ms containment.
    Run pipx install sprawl-cli or curl installer. Sovereign local execution on Linux, macOS, and Windows (WSL).
  • For Tech Leads & C-Suite: Enterprise Governance & Advisory
    Transition your engineering organization from shadow AI chaos to governed, cost-clamped runtimes.
    14-day Workstation Governance Pilot, Fractional Head of AI Review, DORA and EU AI Act Compliance.
Sprawl Software | sprawl.software | Younes Baghor

Tame the Sprawl. Stay Local.

Deterministic workspace containment and context package management for autonomous coding fleets.

Younes Baghor
Fractional Head of AI & Enterprise Systems Architect

Read Deep-Dive Articles on Blog RECOMMENDED
Token FinOps audits, rogue loop clamping & agent containment case studies
→
Fractional Head of AI & Advisory Retainers
14-day workstation governance pilots, DORA compliance & executive briefings
→
Sprawl Software | sprawl.software | Younes Baghor
←younesbaghor.comRead the Blog→