Why eBPF Verifier Errors Are Hard to Fix: The Diagnostic Gap
When developers load an eBPF program into the Linux kernel, the verifier must prove the program safe before any bytecode runs.
eunomia blog
Latest writing from eunomia.dev on eBPF, bpftime, AI tracing, and systems research.
Latest posts
From Tokens to Verifiable Work: Agent Infra Is Rewriting Its Unit of Measure
A single model call is easy to account for. Which model, how many tokens, how long, whether it failed. Agents break this simplicity. One user request now sprawls across dozens of calls, tool invocations, pauses for
An Empirical Study: AI Agent Rules Need Context and Layered Enforcement
A rule like "run the full test suite before committing" looks simple until an AI Agent edits a source file after the last test run and then calls git commit.
Can an AI Agent Tune the Linux Scheduler? Inside SchedCP and sched-agent
Linux makes scheduling decisions based on runnable tasks, wakeups, priorities, and accumulated CPU time.
Semantic Flamegraphs for AI Agent Traces
When an AI Agent finishes a month of work, you know the total token spend but not the breakdown.
ActPlane: Pushing Agent Harness Enforcement Down to Kernel eBPF
You wrote a rule in CLAUDE.md: "do not run git push." The agent complied: it never called the git tool.
Runtime Observability and Enforcement for Opaque AI Agents with eBPF: Beyond Sandboxes and Approvals
AI coding agents now run for hours, complete entire features end-to-end, optimize production GPU kernels, and merge thousands of pull requests autonomously.
When CPU Noise Slows Down GPU Inference: Measuring Scheduler and IRQ Impact with eBPF
GPU inference often looks like a GPU problem, but the CPU still sits on the critical path.
ACRFence: Preventing Semantic Rollback Attacks in Agent Checkpoint-Restore
AI agent frameworks are bringing checkpoint/restore, time travel, and rewind into everyday developer workflows.
AgentCgroup: What Happens When AI Agents Meet OS Resources?
An AI agent spends several quiet minutes reading and editing files, then launches pytest.
Reverse Engineering Claude Code's SSL Traffic with eBPF
Ever wondered what your AI coding agent is actually sending over the network? As part of our work on AgentSight — an eBPF-powered observability tool that monitors AI agents at system boundaries without modifying their
A Taxonomy of GPU Bugs: 19 Defect Classes for CUDA Verification
GPU programming introduces a distinct class of correctness and performance challenges that differ fundamentally from traditional CPU-based systems.
Architectures for Agent Systems: A Survey of Isolation, Integration, and Governance
Large Language Model (LLM) based agent systems – software that leverages LLMs to autonomously plan and execute multi-step tasks using external tools – are rapidly moving from proof-of-concept demos into enterprise
The GPU Observability Gap: Why We Need eBPF on GPU devices
As a revolutionary technology that provides programmability in the kernel, eBPF has achieved tremendous success in CPU observability, networking, and security.
NVIDIA Open GPU Kernel Modules Comprehensive Source Code Analysis
In May 2022, NVIDIA made a decision that would fundamentally alter the landscape of GPU computing on Linux: they open-sourced the kernel-mode components of their GPU driver.
Understanding iaprof: A Deep Dive into AI/GPU Flame Graph Profiling
An exploration of Intel's innovative profiling tool that bridges the gap between CPU and GPU execution
AgentSight: Keeping Your AI Agents Under Control with eBPF-Powered System Observability
Picture this: your AI agent is autonomously writing code and executing commands, but you have no idea what it's actually doing.
Profiling and Tracing Tools Across System Layers and Architectures
Profiling and tracing are complementary techniques for analyzing software performance and behavior.
The Modern Memory Testing Arsenal -- A Complete Guide to Benchmarking Tools for Next-Gen Memory Systems
Memory systems are evolving rapidly. From traditional DDR DRAM to high-bandwidth memory (HBM), persistent memory (PMEM), and the emerging Compute Express Link (CXL) technology, today's systems feature complex
Observability, Profiling, and Debugging in Systems Conference (2015–2025)
This survey reviews over a decade (2015–2025) of research on observability, profiling, and debugging techniques in computer systems, focusing on main-track papers from OSDI, SOSP, and EuroSys.
Checkpoint/Restore Systems: Evolution, Techniques, and Applications in AI Agents
Checkpoint/restore (C/R) technology – the ability to save a running program’s state to persistent storage and later resume execution from that point – has long been a cornerstone of fault tolerance and process
ASPLOS 2025: Paper Summaries and Insights
The Association for Computing Machinery's Architectural Support for Programming Languages and Operating Systems (ASPLOS) conference is a premier venue where researchers present cutting-edge work spanning computer
EuroSys 2025 Paper Summaries and Analysis
This post offers a detailed examination of papers accepted at EuroSys 2025, one of the premier conferences in computer systems research.
GPU Profiling Under the Hood: An Implementation-Focused Survey of Modern Accelerator Tracing Tools
Profiling and tracing heterogeneous accelerators (GPUs, DPUs, and APUs) is crucial for optimizing performance in modern systems.
The Accelerator Toolkit: A Review of Profiling and Tracing for GPUs and other co-processor
Modern computing increasingly relies on specialized accelerators – notably GPUs, DPUs, and APUs – to handle diverse workloads.
OS-Level Challenges in LLM Inference and Optimizations
Large Language Model (LLM) inference pushes computing systems to their limits, not only in raw compute but also in how the operating system (OS) manages resources.
WASI and the WebAssembly Component Model: Current Status
WebAssembly (WASM) has evolved from a browser-based technology into a promising runtime for server and embedded applications.
eBPF Ecosystem Progress in 2024–2025: A Technical Deep Dive
Extended Berkeley Packet Filter (eBPF) continues to rapidly evolve, cementing its role as a cornerstone for operating system extensibility.
Security Vulnerabilities Study in Software Extensions and Plugins
Software extensions and plugins allow customization and added features across many systems – from web servers and databases to browsers, IDEs, and CMS platforms.
Can LLMs understand Linux kernel? A New AI-Powered Approach to Understanding Large Codebases
Ever tried diving into a massive codebase like the Linux kernel and felt like you were swimming in an ocean of code with no land in sight?