Kubernetes Operator based on the open-source container vulnerability scanner Trivy.
A hands-on lab toolkit for container security, from CIS-benchmark fundamentals to architectural trust governance. 12 production-grade labs covering image hardening, signing, supply chain attestation, admission control, and runtime debugging. Designed around reproducible, production-oriented container security scenarios.
Real-time serving of full-duplex interaction models: per-tick deadline scheduling + KV-budget admission control. Systems research.
In-process Tokio task supervisor: one job per key with queue/replace/reject admission, retries, graceful shutdown, and reliable final outcomes
TokenSched 给 Claude Code 的 token 预算装上了一个 CPU 调度器：它按子任务期望值预分配预算、预测超支，并在 5 小时窗口耗尽前自动把低价值工作降级到 Haiku 或抢占——把硬截断变成可调度的软退让。
Shared lifecycle admission protocol and reference policy kernel for DeepSeek Harness subagents.
A focused async bulkhead for Java that limits in-flight work and makes overload visible.
C++17 + CUDA orchestrator for running multiple LLM agents on one constrained GPU. `lmxd` daemon does NVML-seeded admission control to stop llama.cpp OOM crashes; `LayerStreamer` + `PinnedHostPool` show 22–32% wall-clock savings via double-buffered `cudaMemcpyAsync` on two CUDA streams. KV-swap helper included.
12 hands-on CKS labs covering API server hardening, audit logs, NetworkPolicy, ingress security, RBAC, service accounts, Pod Security, admission control, node and kubelet hardening, seccomp, AppArmor, secure pod design, secrets, image scanning, SBOMs, signing, manifest analysis, Falco, runtime security, and timed readiness.
Chaosify is a Kubernetes security testing CLI that proves your admission controls, RBAC policies, network segmentation, and runtime detection actually work by running targeted tests against a live cluster and producing structured evidence.
Fail-fast admission control for LLM workloads, with concurrency limits, token budgeting, deduplication, streaming support, and overload protection.
Give an AI agent the keys to a real Kubernetes platform and watch it burn, then turn on the CNCF and agent-specific guardrails that stop it. Hands-on security workshop from AI Engineer World's Fair 2026.
SimpleTicketing is a lightweight digital ticketing system for non-profit organizations.
Typed, zero-dependency bulkhead and bounded-concurrency library for Python asyncio, with FIFO queues, deadlines, metrics, and weighted capacity.
面向生产的 OpenResty 流量网关模板，支持热点活动流量保护、等待室准入、关键链路保护与可复用策 略控制。
Agent Gate Incident Replay is a browser-runnable blackbox replay runtime for Agent incidents. It restores a real VM state in the browser with [v86](https://github.com/copy/v86), mounts an incident module, and replays the agent's actions against real runtime boundaries and real Agent Gate verdicts.
Admission control for human approvers — pressure-aware queueing, delegation, and auto-approval, governed by an LLM agent and validated by a deterministic policy engine.
Adaptive, TCP-Vegas-inspired concurrency limiting for Node.js - sheds load based on latency gradient, not a fixed guess. Includes a benchmarked comparison against fixed-threshold and AIMD limiting.
Interactive simulator for understanding how systems behave under load. Compare fail-fast vs bounded queue admission control and see why queues hide overload instead of solving it.
Add a description, image, and links to the admission-control topic page so that developers can more easily learn about it.
To associate your repository with the admission-control topic, visit your repo's landing page and select "manage topics."