Use eBPF where application hooks stop

System probes can observe execution across closed-source CLIs, child commands, and runtime boundaries. AgentSight combines those signals with agent session and model context instead of exposing only kernel events.

Keep the profiler boundary explicit

Capture depends on operating system, privilege, binary packaging, and selected probes. Verify the supported platform and current AgentSight guide before promising coverage.

Primary sources