[ User Space ]
  ┌─────────────────────────────────────────────────────────┐
  │  FastAPI / Node.js Application (LLM Agent Workflows)    │
  └───────────────────────────┬─────────────────────────────┘
                              │ Socket Send / Syscall
  ────────────────────────────┼──────────────────────────────
  [ Linux Kernel Space ]      ▼
  ┌─────────────────────────────────────────────────────────┐
  │  Agent-eBPF Engine (eBPF XDP / Socket Buffer Filter)    │
  │  ├── AST & Regex Rule Matching (<50 µs execution)       │
  │  └── Policy Enforcement (PASS / DROP / TCP_RST)         │
  └───────────────────────────┬─────────────────────────────┘
                              │
               ┌──────────────┴──────────────┐
               ▼                             ▼
       [ PASS: Safe Execution ]      [ DROP: TCP Reset / Block ]
       Routes to Database / API      Interrupted before reaching app

# Install Agent-eBPF CLI and Kernel Daemon
curl -fsSL https://get.agent-ebpf.dev | sh

# Verify daemon status
agent-ebpf status

version: "v1alpha"
metadata:
  name: "production-agent-shield"

rules:
  # 1. Block Destructive SQL Queries (UPDATE/DELETE without WHERE)
  - id: "sql-no-where-mutation"
    type: "db_query"
    protocol: "postgres" # or mysql
    severity: "critical"
    action: "DROP"
    match:
      pattern: '(?i)^(UPDATE|DELETE)\s+((?!WHERE).)*$'
    message: "Destructive SQL mutation lacking a WHERE clause was blocked."

  # 2. Enforce Multi-Tenant Isolation
  - id: "tenant-isolation-enforce"
    type: "db_query"
    protocol: "postgres"
    severity: "high"
    action: "DROP"
    match:
      require_header_context: "X-Tenant-ID"
      must_contain: "tenant_id ="
    message: "SQL query missing required tenant_id filter."

  # 3. Block Prohibited System Calls (Prevent Process Hijacking)
  - id: "block-unsafe-syscalls"
    type: "syscall"
    severity: "critical"
    action: "KILL_PROCESS"
    match:
      syscalls:
        - "execve"
        - "ptrace"
      binary_path_regex: ".*/python.*"
    message: "Agent blocked from spawning unauthorized sub-processes on the system."

# Validate policy file and load into kernel
agent-ebpf load --config ./policy.yaml --interface eth0

# Monitor active rules live
agent-ebpf monitor

[AGENT-eBPF] Kernel hooks attached successfully. Listening on sock_ops & uprobes...
[INTERCEPTED] Timestamp: 1716198402 | Rule: sql-no-where-mutation | Latency: 32µs
  ├─ Process: python3 (PID: 41029)
  ├─ Payload: "DELETE FROM users"
  └─ Action: TCP_RST sent to socket (Connection Closed).

import pytest
import psycopg2

def test_blocked_destructive_query():
    """
    Verifies that a query missing a WHERE clause is intercepted in the kernel
    before reaching the application layer while Agent-eBPF runs in the background.
    """
    conn = psycopg2.connect("dbname=app_db user=postgres host=127.0.0.1")
    cursor = conn.cursor()

    # The kernel eBPF rule must drop this query in <50µs.
    with pytest.raises(psycopg2.OperationalError) as exc_info:
        cursor.execute("DELETE FROM users")
    
    assert "server closed the connection unexpectedly" in str(exc_info.value)
    print("\n[SUCCESS] Kernel-level interception confirmed under 50 microseconds.")

version: "3.8"

services:
  agent-ebpf-daemon:
    image: ghcr.io/agent-ebpf/daemon:latest
    container_name: agent_ebpf_shield
    network_mode: "host"
    privileged: true
    cap_add:
      - SYS_ADMIN
      - BPF
      - NET_ADMIN
    volumes:
      - /sys/fs/bpf:/sys/fs/bpf
      - /etc/agent-ebpf/policy.yaml:/etc/agent-ebpf/policy.yaml:ro
    restart: always

uvicorn mcp_server:app --host 0.0.0.0 --port 8000

https://your-domain.com/sse