AD-001 — eBPF redirect + passive uprobe key extraction
AD-002 — Attach at pod parent cgroup, skip UID 1337
AD-003 — Original destination via socket-cookie tuple bridge
AD-004 — Fail-closed resolver: RST on tuple miss
AD-005 — pcapng + embedded DSB as default capture
AD-006 — Keylog and capture treated as secrets
AD-007 — Pure-Go eBPF loader, kernel ≥ 5.10
AD-008 — OpenSSL libssl as the only uprobe module
AD-009 — Static build + rootful pod requirements
AD-010 — LD_PRELOAD interposer replaces uprobe extraction
AD-011 — Interval-flush pcapng writer + LINK_MODE
AD-012 — ifindex, snaplen and RETAIN capture fixes