Runtime extension
Move eBPF beyond kernel-only workflows
Run, instrument, and extend systems with userspace execution paths, GPU paths, JIT/AOT support, and deployment models that fit production tooling.
Open-source infrastructure
Eunomia
Open-source eBPF infrastructure for runtime extension, GPU tracing, and AI Agents.
What Eunomia Provides
Runtime infrastructure, public resources, and AI agent systems define the work behind Eunomia.
Resources
Publish reusable tutorials, docs, blogs, and papers
Maintain executable tutorials, documentation entry points, technical writing, and research artifacts for eBPF builders.
AI Agents
Observe and harness AI agents at the system layer
Zero-instrumentation, framework-agnostic visibility into what agents actually do — plus runtime guardrails on what they are allowed to do.
Projects
Open-source platform projects and public resources grouped by how people use them.
Platform
Execution engines, toolchains, runtime components, and low-level extension paths.
AI Agents
Tracing, observability, and safety work for AI agent systems.
Resources
Tutorials, documentation, blog posts, and research papers for eBPF builders.
Latest writing
All postsActPlane: Pushing Agent Harness Enforcement Down to Kernel eBPF
ActPlane is an eBPF-based policy engine that observes and enforces AI agent behavior at the OS kernel level. This post analyzes the systemic blind spots of prompt constraints, tool-layer guards, and sandboxes, and explains how ActPlane uses label propagation and temporal predicates to implement a deterministic agent harness.
Runtime Observability and Enforcement for Opaque AI Agents with eBPF: Beyond Sandboxes and Approvals
As AI coding agents run autonomously for hours inside harnesses and sandboxes the platform team may not own, approval-based control breaks down. This post argues for separating agent security into three layers (intent authorization, execution isolation, side-effect verification) and using eBPF-based observability (AgentSight) and enforcement (ActPlane) as an independent runtime observability and enforcement below the harness.
When CPU Noise Slows Down GPU Inference: Measuring Scheduler and IRQ Impact with eBPF
Quantitative eBPF tracing of CUDA kernel launches, scheduler context switches, and IRQs shows when CPU noise matters for GPU LLM inference and how CPU pinning recovers throughput.