// USE CASE
High-Compliance Healthcare
Kernel-level audit logs as evidence for HIPAA, NOM-024, and FDA SaMD reviews.
+
// HEALTHCARE · ILLUSTRATIVE SCENARIOHigh-Compliance Healthcare
Kernel-level audit logs as evidence for HIPAA, NOM-024, and FDA SaMD reviews.
HIPAANOM-024FDA · SaMDGDPR · Art. 9
Imagine a hospital network running GPU-backed diagnostic imaging models. Auditors want evidence that PHI never left the host. The Auditor daemon attaches at libcuda.so and the ioctl tracepoint, records every GPU launch and ioctl as a structured event, exposes counts via Prometheus, and forwards alerts to whatever log pipeline you already trust. The audit artifact is the kernel-side event stream, captured below the application.
Audit posture
kernel-side · below the app
Evidence
Prometheus + log stream
Numbers above
design target · not measured