4 papers
Characterizing and Bridging the Diagnostic Gap in eBPF Verifier Rejections
Yusheng Zheng, Zhengjie Ji, Weichen Tao +5
eBPF lets developers run custom programs inside the Linux kernel, where a verifier proves each program safe. However, when the verifier rejects a program, the unclear error makes r…
ActPlane: Programmable OS-Level Policy Enforcement for Agent Harnesses
Yusheng Zheng, Tianyuan Wu, Quanzhi Fu +6
AI agents increasingly run in production through harnesses, the software around the LLM, including an engine that enforces safety and effectiveness policies, e.g., 'run tests befor…
Kops: Safely Extending the eBPF Compilation Pipeline with Native Operations
Yusheng Zheng, Zhengjie Ji, Weichen Tao +4
eBPF safely extends OS kernels in domains such as networking, observability, and security. The safety comes from an in-kernel compilation pipeline where a verifier checks every pro…
gpu_ext: Extensible OS Policies for GPUs via eBPF
Yusheng Zheng, Tong Yu, Yiwei Yang +8
Performance in modern GPU-centric systems increasingly depends on resource management policies, including memory placement, scheduling, and observability. However, uniform policies…