Notes on agent runtime security, systems work, and what I am building.
September 8, 2026
AgentGuard: eBPF LSM for coding agents. YAML in the repo. Deny is EPERM. Policy that remains true when the agent's own conscience is false.
August 12, 2026
Prompts are not a TCB. Here is why I enforce agent limits in the kernel, and what that looks like in practice.
July 21, 2026
If a rule cannot be reviewed in git and enforced without the model, it is a suggestion. Policy has to live elsewhere.