A simple bpf program to monitor process traffic by cgroup_skb/egress and cgroup_skb/ingress
Transparent proxy built on cgroup net_cls.
secexit-common lib.
Egress control daemon using eBPF.
Userspace DNS blocking shim for secexit.
Hyperlightweight process hypervisor for single-server deployments
Extremely lightweight Docker alternative for agents and production services — isolated execution using cgroups, namespaces, seccomp, Landlock, and gVisor
Compile libpcap-style packet filter expressions to classic BPF programs
Allocation profiling and Linux memory telemetry for Rust services.
A lightweight embedded time-series database with a straightforward API
High-performance AI coding agent CLI - Rust port of Pi Agent
CLI for sandlock process sandbox