DEV Community

Discussion on: I built a secure runtime for AI agents with Rust and Linux kernel features

Collapse
 
itskondrat profile image
Mykola Kondratiuk

running agents without syscall constraints is trusting a promise. seccomp-bpf enforces it. the gap between what an agent is supposed to do and what it can actually do - that is the real attack surface.