diff --git a/crates/bashkit/tests/integration/threat_model_tests.rs b/crates/bashkit/tests/integration/threat_model_tests.rs
index 2169e6e5c..d0e7c5523 100644
--- a/crates/bashkit/tests/integration/threat_model_tests.rs
+++ b/crates/bashkit/tests/integration/threat_model_tests.rs
@@ -253,6 +253,24 @@ mod resource_exhaustion {
                 Some(2),
                 "token_lines={token_lines}: raw child exit code"
             );
+            assert!(
+                !run.oversized,
+                "token_lines={token_lines}: output exceeded the 64 KiB sample cap"
+            );
+            assert!(
+                !run.incomplete_readers,
+                "token_lines={token_lines}: reader threads did not finish"
+            );
+            assert!(
+                run.limits_note.contains("stack=4096"),
+                "token_lines={token_lines}: effective stack cap not read back: {}",
+                run.limits_note
+            );
+            assert!(
+                run.limits_note.contains("cpu=10"),
+                "token_lines={token_lines}: effective CPU cap not read back: {}",
+                run.limits_note
+            );
             assert!(
                 run.stdout.is_empty(),
                 "token_lines={token_lines}: stdout must stay empty"