Reading up on Falco

Veto, a content-addressable kernel enforcement engine, blocks AI agent bypasses of path-based security tools by hashing binaries at the BPF LSM layer.