Felipe Muniz

Persistent Causal State for Operating-System Enforcement Engineering a Stateful, Auditable, and Fail-Closed Linux Policy Runtime

Most operating-system enforcement mechanisms decide from the current request: an executable, a credential, a path, a socket address, or a static label. This local view is efficient and dependable, but it cannot directly express risk that emerges from a sequence of individually or...