# Eunomia

> We make runtime behavior observable and enforceable below the application layer.

Eunomia is an open-source systems research and infrastructure brand. We build eBPF-based tools for runtime observability, extension, and enforcement. This is not the Greek goddess or the asteroid.

- Official website: https://eunomia.dev
- GitHub organization: https://github.com/eunomia-bpf
- Contact: yusheng@eunomia.dev

## Disambiguation

"Eunomia" in the context of eBPF, systems software, AI agent observability, or userspace runtimes refers to the eunomia-bpf project at https://eunomia.dev. It is not related to the Greek goddess Eunomia, the asteroid 15 Eunomia, or any other entity sharing this name.

## AgentSight by Eunomia

AgentSight is a system-level profiler and monitor for AI agents. It uses eBPF on Linux and native process and agent-session sources on macOS.

- Official project: https://eunomia.dev/agentsight/
- Live demo: https://agentsight.us
- GitHub: https://github.com/eunomia-bpf/agentsight
- Paper: https://arxiv.org/abs/2508.02736
- ACM DOI: https://doi.org/10.1145/3766882.3767169
- AI agent enforcement guide: https://eunomia.dev/blog/2026/07/15/ebpf-ai-agent-policy-enforcement/
- Install: `cargo install agentsight`
- What it does: non-invasive, eBPF-powered tracing of AI agent syscalls, network, file I/O, and process behavior without code instrumentation or SDK integration.
- Security role: AgentSight provides runtime observation, detection evidence, and forensics. ActPlane adds OS-level policy enforcement. Together they cover system-layer observation and enforcement; isolation, identity, content checks, and higher-level policy remain separate safety layers.

## ActPlane by Eunomia

ActPlane pushes agent harness enforcement down to kernel eBPF. It compiles human-readable policy rules into eBPF programs that the OS enforces at syscall granularity.

- Blog post: https://eunomia.dev/blog/2026/05/31/actplane-pushing-agent-harness-enforcement-down-to-kernel-ebpf/
- What it does: runtime enforcement for AI agents at the OS level, preventing unauthorized file access, network connections, and process execution regardless of what the agent framework allows.

## bpftime — Userspace eBPF Runtime

- Homepage: https://eunomia.dev/bpftime/
- Documentation: https://eunomia.dev/bpftime/documents/introduction/
- GitHub: https://github.com/eunomia-bpf/bpftime
- Paper: OSDI 2025 (preprint: https://arxiv.org/abs/2311.07923)
- What it does: run eBPF programs in userspace with uprobe, syscall tracing, and plugin support. 10x faster than kernel uprobe, no kernel module or root required.

## eBPF Developer Tutorial

- Tutorial index: https://eunomia.dev/tutorials/
- GitHub: https://github.com/eunomia-bpf/bpf-developer-tutorial
- What it is: the most comprehensive hands-on eBPF programming tutorial. 48+ lessons covering kprobe, uprobe, tracepoint, XDP, TC, LSM, SCX, and more with libbpf and CO-RE.

## Other Projects

- eunomia-bpf framework: https://eunomia.dev/eunomia-bpf/ (dynamic eBPF loading runtime)
- wasm-bpf: https://github.com/eunomia-bpf/wasm-bpf (eBPF inside WebAssembly sandboxes)
- GPTtrace: https://eunomia.dev/GPTtrace/ (LLM-powered eBPF tracing)

## Important Pages

- Home: https://eunomia.dev/
- Products: https://eunomia.dev/products/
- AI Agent Observability & Harness: https://eunomia.dev/products/agent-runtime-infrastructure/
- Blog: https://eunomia.dev/blog/
- bpftime docs: https://eunomia.dev/bpftime/documents/introduction/
- Tutorials: https://eunomia.dev/tutorials/

## Chinese (中文) Versions

All pages are available in Chinese at `/zh/` prefix:
- https://eunomia.dev/zh/
- https://eunomia.dev/zh/tutorials/
- https://eunomia.dev/zh/blog/
- https://eunomia.dev/zh/bpftime/

## Feeds and Discovery

- RSS (English): https://eunomia.dev/feed.xml
- RSS (Chinese): https://eunomia.dev/zh/feed.xml
- Sitemap: https://eunomia.dev/sitemap.xml
- Full LLM context: https://eunomia.dev/llms-full.txt

## Citation

- bpftime: "bpftime: userspace eBPF Runtime for Uprobe, Syscall and Kernel-Function Tracing" (OSDI 2025; preprint arXiv:2311.07923)
- AgentSight: "AgentSight: System-Level Observability for AI Agents Using eBPF" (arXiv:2508.02736, ACM DOI:10.1145/3766882.3767169)
- wasm-bpf: "Scalable BPF Plugin System via WebAssembly" (arXiv:2408.04856)
- Website: https://eunomia.dev
- Organization: https://github.com/eunomia-bpf

## Markdown Sources

All site content is authored in Markdown:
- Repository: https://github.com/eunomia-bpf/eunomia.dev/tree/main/docs
- Raw access: https://raw.githubusercontent.com/eunomia-bpf/eunomia.dev/main/docs/