The zero-overhead daemon runs exclusively via non-blocking eBPF bytecode programs attached to Linux kernel tracepoints. Telemetry collection is strictly read-only, inspecting network headers and TCP state transitions without examining packet payloads or application memory frames.
Every failure injection routine evaluates strict telemetry thresholds before execution. If latency metrics or error budgets exceed pre-allocated SLAs, deterministic circuit breakers instantly abort the test and roll back network filters in under twelve milliseconds.
Air-gapped SOC2 runtime isolation
Designed for strict security postures, FaultLine executes natively inside isolated private clusters without requiring outbound internet access or external cloud control plane connectivity.
Review architectural security specs
Access technical threat models, kernel safety benchmarks, and third-party penetration testing documentation.


