CustomOS demo shell — type help to list commands. Sandbox: no real system access, no persistence, nothing done in your name. Try: harden-audit, dlp-scan user@x.com, or an attack such as rm -rf / (the IDS blocks it).