diff --git a/.github/workflows/kernel.yml b/.github/workflows/kernel.yml
new file mode 100644
index 0000000..8b235df
--- /dev/null
+++ b/.github/workflows/kernel.yml
@@ -0,0 +1,44 @@
+on:
+  workflow_dispatch:
+  pull_request:
+    paths:
+      - kernel/**
+
+name: Kernel
+
+jobs:
+  kernel:
+    name: Build extism-runtime.wasm
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Install Rust
+        uses: actions-rs/toolchain@v1
+        with:
+          toolchain: stable
+          profile: minimal
+          target: wasm32-unknown-unknown
+      - uses: Swatinem/rust-cache@v2
+
+      - name: Install deps
+        run: |
+          sudo apt install wabt --yes
+
+      - name: Build kernel
+        shell: bash
+        run: |
+          cd kernel
+          sh build.sh
+
+      - uses: peter-evans/create-pull-request@v5
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          title: "update(kernel): extism-runtime.wasm in ${{ github.event.pull_request.head.ref }}"
+          body: "Automated PR to update `runtime/src/extism-runtime.wasm` in PR #${{ github.event.number }}"
+          base: "${{ github.event.pull_request.head.ref }}"
+          branch: "update-kernel--${{ github.event.pull_request.head.ref }}"
+          add-paths: "runtime/src/extism-runtime.wasm"
+          commit-message: "update(kernel): extism-runtime.wasm in ${{ github.event.pull_request.head.ref }}"
+          delete-branch: true
diff --git a/kernel/rust-toolchain.toml b/kernel/rust-toolchain.toml
new file mode 100644
index 0000000..23b58f8
--- /dev/null
+++ b/kernel/rust-toolchain.toml
@@ -0,0 +1,4 @@
+[toolchain]
+channel = "stable"
+components = [ "rustfmt", "rust-std" ]
+targets = [ "wasm32-unknown-unknown" ]
diff --git a/runtime/src/extism-runtime.wasm b/runtime/src/extism-runtime.wasm
index 162b67e..b70cf39 100755
Binary files a/runtime/src/extism-runtime.wasm and b/runtime/src/extism-runtime.wasm differ