Kavach Run icon

Kavach Run

Wraps a subprocess in kavachos kernel enforcement (seccomp-bpf + cgroup BPF egress). Linux only — where enforcement is unavailable (non-Linux, or kavachos not installed) it FAILS CLOSED by default (configurable to warn or skip). Use after KavachGate for defense in depth: policy gate + kernel enforcement.

Discussion