Caveat that you're talking to a couple of people who are awake here. And I'm just a bystander anyhow 🙂 It seems as reasonable as anything else. osquery has a lot of tables. They're not all useful to my workflow. I wonder if there's something for a broader docker api interface, as containers become more prevalent, etc.