Skip to content
View nevinshine's full-sized avatar
:octocat:
Building Sentinel
:octocat:
Building Sentinel

Block or report nevinshine

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
nevinshine/README.md
nevin@fedora-lab:~/security-research$ ./identity_matrix.sh

============== [ SYSTEM IDENTITY LOADED ] ==============

! USER_ID :   Nevin Shine (uid=1000)
! CONTEXT :   Systems Security Researcher
! TARGET  :   Cross-Layer Intent Enforcement & 
              Zero-Trust Architecture

+ [0x01] CORE ARCHITECTURE
--------------------------------------------------------
  > Strategy   : Deterministic, kernel-native defense
  > Tech Stack : eBPF, LLVM, LSM, AMD-V, ARMv8 EL2, UEFI SMM
  > Objective  : Closing the Semantic-to-Execution Gap
                 from Ring -2 firmware to L7 MCP semantics

┌─────────────────────────────────────────────────────────────────┐
│  [0x02]  SENTINEL STACK & ALLIED PROJECTS                       │
├──────────────┬──────────────────────────────────────────────────┤
│              │                                                  │
│   Ring -2    │  Sentinel SMM     UEFI DXE · SMI Sandboxing      │
│   Ring -1    │  Sentinel VMI     x86_64 EPT · ARM64 Stage 2     │
│   Ring  0    │  Sentinel-CC      Ed25519 · PCC Enforcement      │
│   Ring  0    │  Telos Runtime    LSM · Intent Correlation       │
│   Ring  0    │  Sentinel RT      Seccomp / LSM · HIDS (M8.2)    │
│   Compile    │  Telos Language   Kernel-Aware Intent Compiler   │
│   Analysis   │  Sentinel-KV      LLVM IR / SMT Formal Verifier  │
│   Wire       │  Hyperion XDP     NIC-Level · Zero-Copy          │
│   L7         │  TBD              MCP · Semantic Firewall        │
│              │                                                  │
├──────────────┴──────────────────────────────────────────────────┤
│                                                                 │
│  STATUS                                                         │
│  ──────                                                         │
│  Sentinel-CC      ██████████  verified   81.6% attack surface ↓ │
│  Hyperion XDP     ██████████  running    wire-speed XDP_DROP    │
│  Telos Runtime    ██████████  active     IFC · taint tracking   │
│  Sentinel SMM     ████████░░  testing    CPL0 Trap · MSR bounds │
│  Sentinel-KV      ████████░░  proving    LLVM IR stack-spills   │
│  Telos Language   ███████░░░  building   Z3 · dual-target IR    │
│  Sentinel VMI     ████████░░  testing    AArch64 EL2 Drawbridge │
│  Sentinel RT      ███████░░░  active     M8 Citadel eBPF hooks  │
│  TBD              ███░░░░░░░  bridging   L7 → Ring 0 sync       │
│                                                                 │
└─────────────────────────────────────────────────────────────────┘

+ [0x03] ARSENAL
--------------------------------------------------------
  # LANGUAGES:   C | C++ | Rust | Go | Python | AArch64/x86 Assembly
  # COMPILER:    LLVM | inkwell | Dual-Target IR | goblin ELF
  # FORMAL:      Z3 SMT | Hoare Logic | IFC Lattice | Sentinel-KV
  # KERNEL:      eBPF | LSM | KVMi | Seccomp ADDFD | cgroups
  # HARDWARE:    ARMv8 EL2 | Stage 2 MMU | AMD-V NPT | x86 SMM
  # FIRMWARE:    UEFI DXE | EDK II | SMI Handlers | ACPI Tables
  # NETWORK:     TCP/IP | XDP | Protobuf | gRPC | MCP
  # FORENSICS:   QEMU Bare-Metal | GDB | bpftool | strace | pahole
  
! [0x04] UPLINK ESTABLISHED
--------------------------------------------------------
  @: nevinshine05@outlook.com
  L: Nürnberg, DE
  W: nevinshine.codeberg.page
  G: github.com/nevinshine
  C: codeberg.org/nevinshine
  
========================================================

Pinned Loading

  1. telos-runtime telos-runtime Public

    A closed-loop security runtime preventing "The Great Exfiltration" and Indirect Prompt Injection in Autonomous AI Agents.

    Python 14 20

  2. hyperion-xdp hyperion-xdp Public

    High-performance stateful network defense using eBPF/XDP. The Network Satellite for the Sentinel Runtime research system.

    C 6 1

  3. sentinel-stack sentinel-stack Public

    A deterministic, multi-layered security runtime utilizing eBPF and hardware virtualization

    C

  4. sentinel-runtime sentinel-runtime Public template

    Runtime Malware Analysis Engine using Linux ptrace & Isolation Forests.

    C 1

  5. sentinel-vmi sentinel-vmi Public

    Ring -1 hypervisor introspection for the Sentinel Stack

    C

  6. telos-lang telos-lang Public

    A zero-trust systems programming language unifying business logic and kernel security policies through a dual-target LLVM BPF pipeline, Z3 formal verification, and Information Flow Control (IFC).

    Rust