I built a Linux Security Module that lives in-tree and boots from upstream

I built a Linux Security Module that lives in-tree and boots from upstream Stackable LSM, four feature-flagged layers, CI compiling it in-tree, and a kernel that boots it in QEMU. Why? Most "security" hobby projects live in user space. I wanted something that lives where the actual protection happens — inside the kernel's LSM framework — and that...