The Exfiltration Gate

Default Phi-3, swappable to any sector-specific persona. Domain-aware intelligence at the driver level. Your PII never leaves the server.

Every suspect ioctl gets two passes. Stage one is a kernel-side heuristic on the hot path: size estimate plus reservoir sample, sub-microsecond. Stage two hands the survivors to the active SLM persona (HIPAA Guardian today, the rest of the rack roadmap, or your own LoRA) that scores intent against a learned exfil profile and returns a 0–100 risk rating with a reason. The persona's threshold — set by your operator, not by us — decides the outcome: allow, alert, or block. The model runs on the same host as the workload with no cloud round-trip and no third-party API. The Persona Switchboard hot-swaps the cartridge at the driver boundary with zero downtime.