Hi all, sharing something I built that might be relevant here. A seccomp user-notify guard for AI agent command execution. Intercepts execve and execveat at the syscall boundary, runs a userspace policy check, allows expected dev tools, blocks disguised or off-policy executables, and emits a JSON audit trail. Repo: https://github.com/blazingRadar/agent-exec-guard-lab Positioned as additive to the existing Hardened Docker Installation pattern, not a replacement for Docker/gVisor isolation. Linux-only, exec-only, with a documented TOCTOU caveat on SECCOMP_USER_NOTIF_FLAG_CONTINUE. Curious whether this kind of layer is interesting to anyone working on the runtime architecture. Happy to discuss tradeoffs or share the broader lab work if useful. Cheers, Nick