Systems Security Researcher / Linux Kernel Defense
Focus: eBPF-LSM, Runtime Enforcement & AI Safety
A split-plane defense architecture preventing Indirect Prompt Injection and Data Exfiltration in Autonomous AI Agents. It bridges the "Semantic Gap" by verifying high-level intent (Cortex) and enforcing it via Kernel (Core) and Network (Edge) boundaries.
M8.2 Active. The Kernel-Level Bodyguard. A pure eBPF-LSM engine featuring Inode-Based Enforcement and Atomic Inheritance Tracking. Now includes a Live TUI Dashboard for real-time fork storm visualization with <5µs latency.
M5.0 Stable. The Network Border Patrol. A high-speed XDP firewall that drops malicious packets at the NIC (O(1)) before sk_buff allocation. Now features Ring Buffer telemetry and Zero-Downtime policy reloads.