ContractWarden: Kernel-Enforced Damage Boundaries for AI Agents via Human-Authorized Contracts
ContractWarden is a Linux reference monitor designed to prevent AI agents from causing unintended damage by enforcing human-authorized boundaries. It separates policy proposal from execution, ensuring that model suggestions are bound to concrete tasks before untrusted code runs. This system uses eBPF and LSM data planes to enforce file and network decisions deterministically.