[sillystuff]

Thanks. Visibility seems to be pretty good. Something like AIDE/Tripwire for BPF might be the next step.

[nickstinemates]

This is effectively what Falco(https://falco.org/) is