Settings
Control socket
What the socket is for, where it lives, and what turning it off changes.
The control socket is the channel sirioctl and agent hooks use to talk to Sirio. On macOS and Linux it is a local Unix socket at $XDG_RUNTIME_DIR/Sirio/control.sock, or under the XDG state directory when no runtime directory exists; on Windows it is a named pipe carrying the same protocol. Either path is overridable with SIRIO_SOCKET.
Turning it off
Settings → General → Control socket, or SIRIO_SOCKET_ENABLE=0 at launch. With the socket off, sirioctl cannot connect and launched agents receive no hook configuration; Sirio still detects their state from titles and processes.
Security
The socket accepts connections only from the same user; Sirio checks peer identity on connect. Nothing listens on the network.