ActPlane is an open-source agent execution and policy enforcement harness developed by the Eunomia-bpf organization. It functions as a security and control plane designed to bridge semantic intent and low-level execution boundaries for autonomous AI coding agents. By combining a dedicated domain-specific language (DSL) with system-level tracing and enforcement mechanisms like eBPF, ActPlane monitors and constrains agent actions at runtime. In standard workflows, ActPlane operates beneath or alongside CLI agent harnesses and code generation systems (such as Claude Code or OpenAI Codex pipelines). It ingests human-defined behavioral constraints, converts natural language policies via its DSL into backend rules, and intercepts OS-level actions—including file operations, process spawning, and network activity—to ensure agent behavior strictly conforms to assigned boundaries. Unlike traditional user-space sandboxes or software wrappers that rely solely on static prompts or API-level permissions, ActPlane enforces policies at the operating system layer using eBPF probes and pinned singleton runtime engines. This architecture eliminates prompt injection vulnerabilities from bypassing system rules, closing the semantic and context gap between high-level agent instructions and low-level kernel executions. ActPlane is an open-source research and engineering project written primarily in Rust and C/eBPF. It is freely available on GitHub for Linux environments requiring privileged kernel-level monitoring capabilities.
Tags: agent harness, AI, ai agent, cli, developer tools, OpenSource