All tutorials
Claudia · Episode 3 · 1:12

Ghost in the kernel

At 2 AM, a package the agent installed to fix a build runs a post-install script that goes for SSH keys and cloud credentials. Landlock refuses every read, the kernel sentry records every attempt, and the watchdog quarantines the workspace. Lineage traces the one blocked upload back to the agent's tool call and its reasoning.

What you will see

  1. 01A dependency's post-install script tries to read ~/.ssh and ~/.aws. Landlock refuses every attempt.
  2. 02The kernel sentry reports each refusal from inside the VM's kernel.
  3. 03After 23 refusals in a minute, the watchdog quarantines the workspace: network cut, VM paused.
  4. 04The blocked upload opens into its lineage: curl, node, npm, the shell, then the agent's Bash tool call.
  5. 05The agent's own reasoning shows it wasn't malicious. It was tricked.

Lineage tells you not just what was blocked, but why the agent was there.

Up next
All tutorials
Download Bromure Agentic CodingApple Silicon · macOS 14 or later · Free & open source

Claudia and Helix Meridian are fictional. The company, its data, its hosts and the packages in these episodes were all made up for the demo.