my interpretation is that there is a concept of external extension (to which osquery communicates over IPC) and the same logic can be build as a dynamic loadable module too ..(no IPC needed for that)..that's what i am trying to build..