VISMATIC framework uses rootless containers to catch AI-generated code

The widespread adoption of Generative AI has made it virtually impossible to distinguish authentic student effort from instant AI code synthesis by evaluating final submissions alone. To preserve pedagogical integrity, educators must enforce authentic coding discipline through unassisted, iterative development cycles. While centralized environments like JupyterHub provide monitoring capabilities, they introduce severe operational vulnerabilities because they expose the underlying shared host to unauthorized system manipulation and lateral movement.

VISMATIC resolves this tension between process-oriented monitoring and infrastructure security by using rootless containers that isolate each student's environment. The framework captures programming behaviors at the API level, enabling instructors to detect patterns like rapid code generation or off-platform workflows. A pilot cohort demonstrated that VISMATIC's behavioral metrics successfully flagged anomalies while maintaining student anonymity, offering a scalable blueprint for safeguarding educational discipline in the AI era.