Published August 7, 2026 • Zenodo
When Agents Control the Kernel
A JEPA World Model Safety Gate with Empirical False-Negative Decomposition
The report presents FerrumOS's provider-independent OS-level action-mediation architecture, combining deterministic enforcement with action-conditioned JEPA transition screening before capability-gated syscalls.
13,697OS-state transitions
3,639QEMU episodes
500Counterfactual episodes
81.4%Rules + JEPA balanced accuracy
What the evidence says
- Rules alone reached 75.2% balanced accuracy; rules plus JEPA reached 81.4%.
- A strong per-action mean baseline reached 81.2%, so the report does not claim JEPA is necessary for the binary decision.
- Measured mean preview latency was 1.35 ms at H=1 and 1.59 ms at H=5 in the published study.
- Remaining failures separate into missing semantic assets, long-horizon process accumulation, and heap underprediction.
Evidence boundary
This is an authored systems-research evaluation, not an independent replication, formal safety proof, physical deployment result, or certification.