eBPF mark-of-the-web for Linux: tag network-touched files and enforce who can exec them.
Shared types and constants for the linprov daemon and its BPF program (OriginRecord, AllowRule, FNV hashing).
BPF LSM programs for the linprov daemon. Source crate consumed by `linprov`'s build.rs to produce the in-kernel object; Dual MIT/GPL kernel-side, MIT OR Apache-2.0 source.
Build-time support for aya projects (linprov fork — adds kfunc relocation, InodeStorage map, BPF func_info pruning)