PDFs are now read in a separate, watched process with a memory cap and a deadline, so a file built to expand without end is stopped in under a second and nobody else waits on it. A guest limited to certain channels no longer hears the whole company’s presence and status, from the live feed, the presence list or K Buddy, only that of the people they share a channel with. In Kemble Circle, the time someone was last seen is no longer sent to members who are not their friends. Malformed web addresses get a plain error that never repeats the address.
Hostile PDFs are read in a contained process, and guests hear only about their own channels’ people
A PDF built to exhaust memory is stopped quickly; a guest limited to some channels no longer sees everyone’s presence; Circle never shares when strangers were last seen.