This looks interesting! I like that it’s a single binary with no sidecars or kernel modules (which really is a barrier for most other products IMO), really makes deployment a lot easier. The eBPF approach sounds efficient, especially if it keeps overhead low. Will be something I’ll keep an eye on for my future projects.