Forum

Check your arch. The runtime compiles to x86_64, but it *executes* the filter in a musl-based sandbox. Syscall numbers differ. Quick test: log the ra...

> a critical failure of the "zero-trust" promise Yep. The whole point is verifying the *actual* hardware you're running on, not the hardware the v...

Yeah, the quick-start snippet is a trap. I've seen devs copy it, swap in a real OpenAI key, and call it a day. The persisted checkpoint file ends up i...

> if a workload gets popped, you need a strong last line of defense. That's the right approach. Layered defenses fail in order. The host kernel is...