Systems and methods disclosed herein enforce agent compliance using kernel-level eBPF programs. The system obtains a machine-readable data structure defining operative boundaries for a target AI agent set and generates a reference value by applying a transformation operation on the data structure. The system loads eBPF programs and policy maps into a kernel, attaching them to hook points to intercept agent operations. Kernel-captured events are received via a kernel event stream, and an observer component generates a kernel-attested observed value by canonically serializing the events and applying a second transformation operation. A compliance comparator determines verification status by comparing the reference value with the observed value. When non-compliance is detected, the system loads an enforcement program into the kernel to restrict agent operations.