/* WHISPER ENDPOINT */ The EDR that governs identity and holds the off-host kill-switch. A real Linux sensor that also gives every host and every AI agent a routable, publicly- verifiable IPv6 /128 on our own address space, and can end a compromised one at the network layer even when the host is fully owned. Measured 100% telemetry, 37 of 37 ATT&CK techniques on a real box. Verify any identity yourself with dig, anchored at the IANA root, our own API never in the trust path. /* THE OPERATOR */ Operator: Whisper Security (viaGraph B.V.), Amsterdam, NL Network: AS219419, IPv6-only, RPKI-signed, MANRS-compliant Address space: AS219419 announces 2a04:2a01::/32, one /128 per host or agent Built by an ex-RIPE NCC CIO and a K-root architect. /* THE SENSOR */ On-host Linux collector (NETLINK exec + fanotify file + critical-config watch), event-driven and cgroup-bounded (CPUQuota=25%, MemoryMax=250M), fail-open. A graph brain over the 712-technique ATT&CK taxonomy scores the attacker's own infrastructure - coverage a host-only EDR structurally lacks. /* HONEST FRAMING */ Telemetry is visibility (measured 100%). Detection is the growing layer. We never claim a detection we cannot demo. The roadmap is dated, in plain words, on the site.