22 papers
KernelScript: Cross-Boundary Typed DSL for eBPF Applications
Cong Wang, Siyuan Sun, Yusheng Zheng
eBPF lets developers extend Linux with custom packet processing, tracing, and scheduling logic, and a verifier proves before execution that the code will not crash the kernel. The…
Characterizing and Bridging the Diagnostic Gap in eBPF Verifier Rejections
Yusheng Zheng, Zhengjie Ji, Weichen Tao +5
eBPF lets developers run custom programs inside the Linux kernel, where a verifier proves each program safe. However, when the verifier rejects a program, the unclear error makes r…
ActPlane: Programmable OS-Level Policy Enforcement for Agent Harnesses
Yusheng Zheng, Tianyuan Wu, Quanzhi Fu +6
AI agents increasingly run in production through harnesses, the software around the LLM, including an engine that enforces safety and effectiveness policies, e.g., 'run tests befor…
Kops: Safely Extending the eBPF Compilation Pipeline with Native Operations
Yusheng Zheng, Zhengjie Ji, Weichen Tao +4
eBPF safely extends OS kernels in domains such as networking, observability, and security. The safety comes from an in-kernel compilation pipeline where a verifier checks every pro…
CXLMemUring: A Hardware Software Co-design Paradigm for Asynchronous and Flexible Parallel CXL Memory Pool Access
Yiwei Yang, Yusheng Zheng, Kexin Chu +3
CXL-attached memory lets servers add more memory while keeping the standard load/store programming model. The main drawback is latency. CXL memory accesses are too slow for normal…
Sandlock: Confining AI Agent Code with Unprivileged Linux Primitives
Cong Wang, Yusheng Zheng
AI agents increasingly run untrusted code on developer machines: shell commands generated by language models, third-party scripts retrieved at runtime, and tool plugins of unknown…