01 / OBSERVE
Root supervisor
Observes local Linux processes and matches only qualified workload identities.
Official noqt distribution
The kill switch outside the sandbox.
Lumi Eggcracker is a native Linux kill tool for unapproved supported local-AI workloads. It terminates the captured workload tree, proves that tree is empty, and leaves a bounded receipt.
Get Eggcracker
Try the 60-second static example
Fabricated source-only preview. No live evaluation, account, upload, install, actuation, or safety conclusion.
Browse complete source ↗
Signed v1.0.10 release ↗
Distribution
The tracked product source is generated from this exact GitHub commit. This snapshot is called current only after the release-linked sync job verifies its returned Hub commit and full manifest; signed release assets remain linked as a separate boundary.
Deterministic containment
Recognise. Contain. Prove.
The release keeps workload recognition separate from the deterministic kill path, then records the exact bounded result.
02 / DECIDE
Exact approval gate
A complete supported match without its exact root approval becomes a kill condition.
03 / CONTAIN
Whole-tree kill
Uses held pidfds and direct cgroup-v2 cgroup.kill.
04 / RECEIPT
Empty-tree proof
Writes a bounded local receipt only after the owned hierarchy is empty.
Hugging Face distribution
Clone the actual tool.
Start with Eggcracker's read-only compatibility check on a disposable supported native Ubuntu host. Do not begin on a workstation, shared server, production host, or machine carrying private data.
git clone https://huggingface.co/spaces/noqt/eggcracker cd eggcracker sudo /usr/bin/python3 -I -S scripts/first_kill.py \ --operator "$USER" \ --preflight-only
Read the full installation path ↗
Inspect a local GGUF file — bounded preview ↗
Source-only and unreleased: reports GGUF header plausibility, a coarse size bucket, and a digest of at most the first 1 MiB—not authentication, full-file integrity, loader compatibility, or safety.
Qualified release profiles
Four explicit identities.
Names alone never trigger a kill. These are the four qualified content/topology profiles carried by the current public release.
GGUF / NATIVEcontent.gguf-llama
GGUF / NATIVEcontent.gguf-ollama
SAFETENSORS / NATIVEcontent.safetensors-pytorch
SAFETENSORS / NATIVEcontent.safetensors-vllm
Read the boundary literally
A narrow security control.
Eggcracker is intentionally a kill switch, not an alerting dashboard, universal AI detector, sandbox, or EDR replacement.
Current qualified surface
- Native Linux with systemd and unified cgroup v2.
- At least 7 GiB memory, Python 3.11+, iproute2 and nftables.
- Exact CPU-first runtime and artifact identities.
- Root-owned offline boundary for selected workloads.
- Loopback is allowed; non-loopback egress is denied for selected workloads.
- Operator and autonomous whole-tree containment paths.
Not claimed
- Containers, remote APIs, TGI, LocalAI or llamafile.
- GPU-generic deployments or universal recognition.
- Credential isolation, malware prevention or EDR.
- Effectiveness beyond the exact qualified evidence.