Tootfinder

🧱 Defense in depth across four policy domains: filesystem (blocks reads/writes outside allowed paths), network (hot-reloadable), process (blocks privilege escalation & dangerous syscalls), and inference (reroutes model API calls)
⚙️ Under the hood it runs a #K3s #Kubernetes cluster in…