Live audit log of every command, file, and network connection a Claude Code (or any matched) session makes, from the kernel.
linux security kernel audit provenance tracing ebpf observability bpf ai-agents yeet kprobe tracepoint llm
-
Updated
Jun 9, 2026 - C