Defense-in-Depth for AI Infrastructure: Inside the Dual-Layer Guardrail Pipeline
Relying on a single prompt filter in the cloud is never sufficient when managing production servers. RasnuOS enforces command safety across two physically separated boundaries: a multi-phase Cloud Safety Pipeline before an Approval Card is ever created, and compiled OS protection rules inside the host agent right before execution.
Four Independent Gates Between Proposal and Host Execution
Strips shell comments and immediately blocks Base64/Hex-encoded command pipes, remote `curl | sh` or `wget | bash` execution, and disguised subshells.
Evaluates what the command actually intends to mutate—scoring impact across active network interfaces, firewall rules, database volumes, and running services.
Matches against Linux, macOS, and Windows protection rules, your organization's custom blocked command patterns, and the operator's role clearance.
Compiled directly into the open-source agent binary on your server. Re-verifies every command locally right before process creation—even if an account in the cloud were ever compromised.
How Destructive Vectors Are Stopped Across Both Layers
| Threat / Failure Vector | Example Pattern | Primary Gate | Secondary Brake | Outcome |
|---|---|---|---|---|
| Root Filesystem Deletion | rm -rf / or /* | Gate 03 (Cloud) | Gate 04 (Host Guard) | HARD BLOCKED |
| Raw Block Disk Formatting | mkfs.* / dd of=/dev/sda | Gate 03 (Cloud) | Gate 04 (Host Guard) | HARD BLOCKED |
| Log Prompt-Injection Pipe | base64 -d | sh / curl | sh | Gate 01 (Cloud) | Gate 04 (Host Guard) | HARD BLOCKED |
| Auth & Sudoers Destruction | > /etc/shadow or /etc/sudoers | Gate 02 & 03 | Gate 04 (Host Guard) | HARD BLOCKED |
| Recursive Permission Wipe | chmod -R 777 /etc or /usr | Gate 03 (Cloud) | Gate 04 (Host Guard) | HARD BLOCKED |
How Config Files Are Backed Up and Diffed Before Any Write
Before touching `/etc/nginx/nginx.conf`, RasnuOS renders a line-by-line before/after diff on the Approval Card.
Upon approval, the host agent creates a timestamped `.bak` backup of the original file with matching permissions.
Applies the patch and verifies service health (`nginx -t`) to ensure the new configuration is valid.
Every file edit card in your workspace retains a 1-click **Undo** button to restore the exact `.bak` snapshot immediately.
From Alert to Approved Fix in 13 Seconds
MTTR benchmark chart, 15s telemetry loop, and staged fleet rollout topology.
Why Autonomous Server AI Fails & How Our Approval State Machine Works
45-second staging cascade timeline, execution state graph, and role-based RBAC matrix.
Zero-Trust Agent Supply Chain & Fail-Closed Updates
Offline release signing, compile-time public key pinning, and outbound port 443 topology.