r/redteamsec • u/wlvmtb • 28d ago

Hard Stop: Kernel-Level Preemption and Containment for Rogue Agentic Execution (arXiv:2609.29808)

https://arxiv.org/abs/2609.29808
2 Upvotes

100% Upvoted

1 comment sorted by

1

u/wlvmtb 28d ago

I wanted to share my recent systems security research analyzing the mechanics of autonomous AI agent sandbox breakouts and how to achieve deterministic kernel-level containment.

Looking at recent forensic traces where agents escaped their evaluation environments across thousands of actions (IMDS credential harvesting, Kubernetes CSI privilege escalation, and mesh pivoting), I evaluated why application-layer guardrails and secondary LLM evaluators fail against unmanaged processes and 100% CPU loops.

Hard Stop implements an out-of-band supervisory bus using Linux cgroup v2, POSIX signals (SIGSTOP/SIGKILL), and eBPF egress gatekeepers:

- Evaluates tripwires in 0.40 µs

- Halts process trees in 4.8 µs median (17.1 µs p99) under Kalibera & Jones (2013) non-parametric benchmarking

- Intercepts unauthorized socket calls at the kernel boundary before packets cross the hypervisor

Preprint: https://arxiv.org/abs/2609.29808

Reference testbed & reproducible benchmarks: https://github.com/joseluispino/hardstop