I have now tested the 1.3.0 toolchain as working and put up the simplified PR (removing BPF without replacing it): https://github.com/osquery/osquery/pull/8814