Skip to content
Sentinel Stack Knowledge Portal

Sentinel KV Analyzer

Security-Focused LLVM IR Analyzer

Section titled “Security-Focused LLVM IR Analyzer”

Sentinel KV (skv-analyzer) is a security-focused LLVM IR analyzer designed for strict attestation, determinism, and ring policy enforcement in kernel and bare-metal environments.

Three-Tier Verification Model

Section titled “Three-Tier Verification Model”
TierRoleTrust Level
Tier 1AI AssistantUntrusted — proposes candidate invariants
Tier 2Human Security GateArbiter — accepts/rejects VCs
Tier 3Z3 SMT SolverAbsolute — mathematically proves safety

AI is a tool, not a decision maker. Humans gate all proof obligations.

LLVM IR Analysis

Section titled “LLVM IR Analysis”
CategoryOperationsFailure Mode
Allocation Provenancekmalloc, kzalloc, kcallocMissing = UNKNOWN
Bounds Checkingload, store, memcpy, memsetOOB = FAIL
Temporal Safetykfree double-free, use-after-freeUAF = FAIL
Pointer TrackingGEP, bitcast, ptrtoint, inttoptrUnresolvable = UNKNOWN

Ring Policies

Section titled “Ring Policies”
RingBehaviorRequirement
ring0Standard verdictDefault rules
ring-1UNKNOWN → FAILEd25519 attestation token
ring-2UNKNOWN → FAILIndependent root trust + separate key chain

Exit Codes

Section titled “Exit Codes”
CodeMeaning
0Pass — all checks satisfied
10Fail — memory safety violation
20Unknown — unresolvable analysis
1Runtime/internal error