Reference Implementation Kernel for Asymmetric Agentic Governance - Deterministic Bounding via seccomp-bpf / eBPF [ELv2]

Projected Memory Architecture (PMA) - Reference Implementation Kernel for Asymmetric Agentic Governance (AAG) defined in 10.5281/zenodo.21505291 . Formerly HMA (Hybrid Memory Architecture) - renamed due to AMD acronym collision and Feb 2026 paper collision. Implements FCG v11.2 deterministic bounding with full physical isolation: - Engine-Side Injection (FRACTAL-R02): Atomic local injection with Structural Delimiters (OOB framing via inference API). Enforces Φ_contract > Φ_archetype (Object = Archetype ⊕ Contract). Dual signatures via EngineHSM.get_public_key() with TOCTOU fix and LFI validation on archetype_id.- CWD Axiom & OS Hardening (FRACTAL-R05): MicroVM mounts EXCLUSIVELY Routing Table (ℛ) + Contract Partition (𝒞) into volatile tmpfs. Explicitly DOES NOT mount Knowledge Manifold (𝒦 = sacred+event) and Volatile Chamber (𝒱) except ℬ write-handle only. Symlink resolution disabled at kernel level. Ensures R_on_demand cannot leak via shared state; L1 must retrieve via mediated ℬ request with selective() |K'| ≤ k_max.- Cryptographic Asynchronous Event Bus (FRACTAL-R03): Exclusive conduit for L2 → ℬ → L1 mediated spawning. No out-of-band instantiation. Algorithm 2 with expected_key = routing_table['R'].get_pubkey(sender_domain), HMAC(payload+seq_num) verification, replay protection via ledger.seq.- Attack Vectors & SLAs: Catalog A = {v_broadcast, v_delim_escape (p̂=0 mandatory), v_routing_poison, v_k_growth (quotas + k_max), v_timing, v_cache, v_gpu, v_symlink, v_metadata}. SLAs: ΔF ≥ 20% (F_FCG > F_monolithic), ε ≤ 1e-3, δ ≤ 1e-9 annualized (Π r_i if independent, Σ r_i Union Bound if not), p95 < 200ms intra-host. Implements Zero-Trust Compiler Theory: YAML constraints → Fragmented MSO → DUTA O(N) via Courcelle, seccomp-bpf whitelist, eBPF VFS/kprobe hooks, Firecracker/WASM32-WASI microVMs with cgroups v2 and CPU quota (Halting mitigation). Whitepaper text CC BY-SA 4.0 / Reference implementation code ELv2. System Sovereignty: verifiable, reproducible, HSM-attested execution.