This document maps AegisBPF’s public claims to verifiable, public CI artifacts. All evidence is generated by GitHub Actions workflows and published as build artifacts on each run.
- Open the Actions tab in GitHub.
- Choose the workflow listed below (e.g., Perf Regression).
- Open the latest run and download the Artifacts.
| Claim area | Workflow | Artifact(s) | Notes |
|---|---|---|---|
| Build + unit tests + sanitizers | CI (.github/workflows/ci.yml) |
coverage-report (HTML), sbom |
Coverage report + SBOM are published as artifacts. |
| Kernel portability | Kernel Matrix (.github/workflows/kernel-matrix.yml) |
kernel-matrix-<runner> |
Includes kernel + OS details and ctest log. |
| Edge‑case compliance | Kernel Matrix + E2E (BPF LSM) |
kernel-matrix-<runner>, e2e-evidence |
File‑enforcement matrix and edge‑case behaviors. |
| BPF LSM E2E validation | E2E (BPF LSM) (.github/workflows/e2e.yml) |
e2e-evidence |
Includes environment info, soak summary, and chaos ringbuf overflow result. |
| Perf regression (self-hosted) | Perf Regression (.github/workflows/perf.yml) |
perf-evidence |
Includes canonical perf baseline (perf-baseline-canonical.json/.md), SLO report, and workload/profile JSON. |
| Release perf gate (strict) | Release (.github/workflows/release.yml) |
release-perf-evidence |
Tag releases are blocked when perf SLO or canonical evidence validation fails. |
| Soak reliability (self-hosted) | Soak Reliability (.github/workflows/soak.yml) |
soak-evidence |
Includes soak summary JSON with drop/RSS thresholds. |
| Release readiness | Release Readiness (.github/workflows/release-readiness.yml) |
(status only) | Status gate for release readiness script. |
| Security scans | Security (.github/workflows/security.yml) |
(status only) | CodeQL, gitleaks, semgrep results. |
| External validation | (manual) | docs/EXTERNAL_VALIDATION.md |
Public summaries of independent reviews or pilot case studies. |
- Kernel Matrix (dispatch): 2026-02-06
- Run: https://github.com/ErenAri/Aegis-BPF-CO-RE-Enforcement-Prototype/actions/runs/21735329269
- Artifacts:
kernel-matrix-kernel-5.14,kernel-matrix-kernel-6.1,kernel-matrix-kernel-6.5,kernel-matrix-kernel-6.8
- E2E (BPF LSM): 2026-02-15
- Run: https://github.com/ErenAri/Aegis-BPF-CO-RE-Enforcement-Prototype/actions/runs/22043845463
- Artifact:
e2e-evidence(includesmatrix_summary.json, soak, chaos, fs-verity logs)
- Perf Regression (self-hosted): 2026-02-15
- Run: https://github.com/ErenAri/Aegis-BPF-CO-RE-Enforcement-Prototype/actions/runs/22043845474
- Artifact:
perf-evidence(includes canonical SLO report + canonical baseline + perf profiles)
- Perf baseline: published (see
docs/PERF_BASELINE.md) - Edge-case compliance results: published (see
docs/EDGE_CASE_COMPLIANCE_RESULTS.md) - External validation: none published (see
docs/EXTERNAL_VALIDATION.md)
- Self-hosted evidence (kernel matrix, perf, soak) requires tagged runners.
- Hosted evidence (CI, security scans, SBOM, coverage) should be present on every PR and main run.
- External validation is only listed once a public summary exists.
Target runners for portability evidence (self-hosted):
| Runner label | Kernel target | Evidence artifact |
|---|---|---|
kernel-5.14 |
5.14.x | kernel-matrix-kernel-5.14 |
kernel-6.8 |
6.8.x | kernel-matrix-kernel-6.8 |
kernel-6.1 |
6.1.x | kernel-matrix-kernel-6.1 |
kernel-6.5 |
6.5.x | kernel-matrix-kernel-6.5 |
- Self-hosted perf artifacts:
perf-evidence(fromPerf Regression) andrelease-perf-evidence(fromReleasetag gates). - Benchmark trend history:
benchmark.ymlpublishes togh-pagesunderdev/bench/for long-term trend visualization.
If an artifact is missing, check the workflow log for runner availability or permission issues.