01 / OBSERVE
Root supervisor
Observes local Linux processes and matches only qualified workload identities.
Official NOQT distribution
The kill switch outside the sandbox.
Lumi Eggcracker is a native Linux kill tool for unapproved supported local-AI workloads. It terminates the captured workload tree, proves that tree is empty, and leaves a bounded receipt.
Distribution
The complete tracked tool source is in this Space repository. Hugging Face visitors can inspect or clone it without going through GitHub; signed release assets remain linked for verification.
Deterministic containment
Recognise. Contain. Prove.
The release keeps workload recognition separate from the deterministic kill path, then records the exact bounded result.
02 / DECIDE
Exact approval gate
A complete supported match without its exact root approval becomes a kill condition.
03 / CONTAIN
Whole-tree kill
Uses held pidfds and direct cgroup-v2 cgroup.kill.
04 / RECEIPT
Empty-tree proof
Writes a bounded local receipt only after the owned hierarchy is empty.
Hugging Face distribution
Clone the actual tool.
Start with Eggcracker's read-only compatibility check on a disposable supported native Ubuntu host. Do not begin on a workstation, shared server, production host, or machine carrying private data.
git clone https://huggingface.co/spaces/noqt/eggcracker cd eggcracker sudo /usr/bin/python3 -I -S scripts/first_kill.py \ --operator "$USER" \ --preflight-only
Qualified release profiles
Four explicit identities.
Names alone never trigger a kill. These are the four qualified content/topology profiles carried by the current public release.
GGUF / NATIVEcontent.gguf-llama
GGUF / NATIVEcontent.gguf-ollama
SAFETENSORS / NATIVEcontent.safetensors-pytorch
SAFETENSORS / NATIVEcontent.safetensors-vllm
Read the boundary literally
A narrow security control.
Eggcracker is intentionally a kill switch, not an alerting dashboard, universal AI detector, sandbox, or EDR replacement.
Current qualified surface
- Native Linux with systemd and unified cgroup v2.
- Exact CPU-first runtime and artifact identities.
- Root-owned offline boundary for selected workloads.
- Operator and autonomous whole-tree containment paths.
Not claimed
- Containers, remote APIs, TGI, LocalAI or llamafile.
- GPU-generic deployments or universal recognition.
- Credential isolation, malware prevention or EDR.
- Effectiveness beyond the exact qualified evidence.