vigil — Architecture

AI Workloads

Ollama

vLLM

llama.cpp

LiteLLM

FastAPI + HF Transformers

syscalls

block decision ↑

Linux Kernel

eBPF Programs (compiled C, embedded in binary)

Ring Buffer

lock-free kernel→userspace event stream · ~zero overhead · structured event records

events stream

block map ↑

User-space Go Daemon

vigil daemon — single static binary

Finds AI serving processes by name/cmdline. Auto-attaches eBPF probes on discovery.

Consumes ring buffer. Parses and enriches events with PID, container ID, timestamp.

Compares events against loaded profile. Flags deviations above threshold.

Writes block decisions to eBPF map. LSM hook reads map synchronously to deny syscall.

Profile Store

ollama.yaml

vllm.yaml

llamacpp.yaml

litellm.yaml

custom.yaml

embedded in binary · overridable

JSON audit log

CLI commands

Output & CLI

Structured JSON to stdout, file, or syslog. Plug into any SIEM (Splunk, Elastic, Datadog).

{"ts":"...","pid":1234,"event":"connect","dst":"1.2.3.4","action":"BLOCKED","framework":"ollama"}

vigil watch [--framework ollama] vigil audit [--tail] vigil profile list | show <name>