Ctrl-C/D instead of echoing a marker, and add a prompt rule: never use heredocs._sanitize_command: regex-detect << EOF as a command is sent, drop those keystrokes, and inject a [SYSTEM] hint.cat << EOF heredoc but never closed it, so the shell hung waiting for input, and Kira’s marker-echo polling kept re-entering the same trap.t-002 and t-004): the agent burned its whole turn budget debugging macros directly on the full 1M-row file instead of a sample.t-004 to 100%, but the other three tasks (t-001/002/003) regressed and heredocs still slipped through, the LLM ignored the prompt rule.Kira's passing rate on large-scale-text-editing across the loop's four eval iterations on the variant set the loop tuned against vs. a held-out variant set never seen during patching.