I built a Linux Security Module that lives in-tree and boots from upstream

AEGIS — a stackable LSM with process protection, file integrity, syscall auditing and module control, built against torvalds/linux with a bootable QEMU devkit and green CI.