hey! is there a design doc describing osquery’s ebpf ingest mechanism? I’m reading through source now but seeing motivations etc might make things click a bit more readily 😄

this might help a bit: https://github.com/osquery/osquery/issues/5218

ty 🙂