Kubernetes Operator based on the open-source container vulnerability scanner Trivy.
-
Updated
Jun 20, 2025 - Python
Kubernetes Operator based on the open-source container vulnerability scanner Trivy.
A hands-on lab toolkit for container security, from CIS-benchmark fundamentals to architectural trust governance. 12 production-grade labs covering image hardening, signing, supply chain attestation, admission control, and runtime debugging. Designed around reproducible, production-oriented container security scenarios.
In-process Tokio task supervisor: one job per key with queue/replace/reject admission, retries, graceful shutdown, and reliable final outcomes
Real-time serving of full-duplex interaction models: per-tick deadline scheduling + KV-budget admission control. Systems research.
Shared lifecycle admission protocol and reference policy kernel for DeepSeek Harness subagents.
TokenSched — proactive token-budget scheduler for LLM agent runs. Pre-flight cost estimation, tiered budgets, and a policy-gated run loop that prevents context overflow before it happens.
C++17 + CUDA orchestrator for running multiple LLM agents on one constrained GPU. `lmxd` daemon does NVML-seeded admission control to stop llama.cpp OOM crashes; `LayerStreamer` + `PinnedHostPool` show 22–32% wall-clock savings via double-buffered `cudaMemcpyAsync` on two CUDA streams. KV-swap helper included.
A focused async bulkhead for Java that limits in-flight work and makes overload visible.
Admission control for human approvers — pressure-aware queueing, delegation, and auto-approval, governed by an LLM agent and validated by a deterministic policy engine.
Chaosify is a Kubernetes security testing CLI that proves your admission controls, RBAC policies, network segmentation, and runtime detection actually work by running targeted tests against a live cluster and producing structured evidence.
Fail-fast admission control for LLM workloads, with concurrency limits, token budgeting, deduplication, streaming support, and overload protection.
Give an AI agent the keys to a real Kubernetes platform and watch it burn, then turn on the CNCF and agent-specific guardrails that stop it. Hands-on security workshop from AI Engineer World's Fair 2026.
SimpleTicketing is a lightweight digital ticketing system for non-profit organizations.
QoS admission control and capacity intelligence for finite AI inference capacity
面向生产的 OpenResty 流量网关模板,支持热点活动流量保护、等待室准入、关键链路保护与可复用策 略控制。
Typed, zero-dependency bulkhead and bounded-concurrency library for Python asyncio, with FIFO queues, deadlines, metrics, and weighted capacity.
Agent Gate Incident Replay is a browser-runnable blackbox replay runtime for Agent incidents. It restores a real VM state in the browser with [v86](https://github.com/copy/v86), mounts an incident module, and replays the agent's actions against real runtime boundaries and real Agent Gate verdicts.
Adaptive, TCP-Vegas-inspired concurrency limiting for Node.js - sheds load based on latency gradient, not a fixed guess. Includes a benchmarked comparison against fixed-threshold and AIMD limiting.
Evidence-backed decision control plane for software delivery, runtime trust, and verifiable decision evidence.
To associate your repository with the admission-control topic, visit your repo's landing page and select "manage topics."