# Introducing Nirmata Runtime for Kyverno: Kernel-Level Enforcement for AI Workloads

DevFeed: [Introducing Nirmata Runtime for Kyverno: Kernel-Level Enforcement for AI Workloads](<https://devfeed.tech/articles/introducing-nirmata-runtime-for-kyverno-kernel-level-enforcement-for-ai-workloads-17656.md>)

Original publisher: [Read original article](<https://nirmata.com/2026/08/16/introducing-nirmata-runtime-for-kyverno-kernel-level-enforcement-for-ai-workloads/>)

Author: Jim Bugwadia

Published: 2026-08-17T01:27:43Z

Content type: release

Language: en

Sources: [Nirmata](<https://devfeed.tech/sources/nirmata.md>)

Topics: [Kyverno](<https://devfeed.tech/topics/kyverno.md>), [Security](<https://devfeed.tech/topics/security.md>), [eBPF](<https://devfeed.tech/topics/ebpf.md>), [configuration](<https://devfeed.tech/topics/configuration.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>)

Tags: [agent](<https://devfeed.tech/tags/agent.md>), [ai](<https://devfeed.tech/tags/ai.md>), [ai-agents](<https://devfeed.tech/tags/ai-agents.md>), [ai-governance](<https://devfeed.tech/tags/ai-governance.md>), [configuration](<https://devfeed.tech/tags/configuration.md>), [ebpf](<https://devfeed.tech/tags/ebpf.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [kyverno](<https://devfeed.tech/tags/kyverno.md>), [policy](<https://devfeed.tech/tags/policy.md>), [product](<https://devfeed.tech/tags/product.md>), [security](<https://devfeed.tech/tags/security.md>)

## AI overview

Nirmata introduces Nirmata Runtime for Kyverno, which extends workload controls beyond admission-time configuration checks by enforcing selected runtime behaviors in the kernel. The article describes BPF-LSM and cgroup-scoped eBPF enforcement for process execution, file access, network egress, and application protocols, plus DNS observation and reporting.

## Source excerpt

Nirmata created Kyverno and donated it to the CNCF in 2020. Kyverno is now a graduated CNCF project and is widely used for enforcing and automating configuration security and best practices. However, admission control answers one question: does this spec look right? It cannot... The post Introducing Nirmata Runtime for Kyverno: Kernel-Level Enforcement for AI Workloads first appeared on Nirmata.