Enforce agent policy in the kernel with eBPF (ActPlane) and hand out revocable, epoch-bound capabilities (PORTICO)

Adversa AI·medium signal

Two defensive designs surfacing in July 2026 coding-agent security work: ActPlane pushes policy enforcement into the kernel via eBPF so the agent harness cannot talk its way past it, and PORTICO issues revocable, epoch-bound capability handles so a stolen or injected reference expires rather than persisting indefinitely. Both exist because the field's conclusion this month is that denylists and per-skill scanning are obsolete against compositional attacks. If you can only adopt one idea: make every credential and tool handle you give an agent expire on a short epoch, so a successful injection buys the attacker minutes, not months.