ebpf-container-escape-framework

eBPF Container Escape Detection & Runtime Audit EDR Detection & audit only. Non-enforcing sensor. No BPF program returns -EPERM; no syscall is blocked. This agent is a runtime observation plane, not a prevention plane. See docs/SECURITY.md and THREATMODEL.md. An ultra lightweight, audit only Linu...