Agent Resource Exhaustion Detection - ATR-2026-00051 (6756a9a3-39c3-5ec5-b28d-1ce94ad25ada)
Detects when an agent causes resource exhaustion through bulk operations, unbounded queries, mass file operations, or patterns that indicate excessive resource consumption. This rule uses regex-only detection on tool call content and agent output to identify dangerous patterns such as SELECT * without LIMIT, mass iteration directives, unbounded batch sizes, and fork/spawn patterns that can degrade system performance or cause denial of service.