Pause
Reset
Kernel Space
User Space
push
emit
poll
stream
write
Kernel Tracepoint
sys_enter_openat
BPF Map
(State)
Perf Buffer
(Transport)
Go Tracker
(Enrichment)
Classifier
(Logic)
NDJSON Sink
(Persistence)