ITIngero Teaminingero.hashnode.dev·Jul 13 · 6 min readRead-Only Kernel Telemetry as MCP Tools: A Design NoteDesign constraints (left) and the seven existing tool calls (right) for a read-only MCP server over an eBPF kernel trace database. TL;DR An MCP server over kernel telemetry has a specific shape: read-00
ITIngero Teaminingero.hashnode.dev·Jul 6 · 6 min readTop of Stack, Bottom of Stack: Where RUM Ends and eBPF BeginsThe five layers of the production observability stack. RUM observes user-visible events at the top. eBPF observes kernel events at the bottom. The middle three need different tools. TL;DR The producti00
ITIngero Teaminingero.hashnode.dev·Jun 29 · 7 min readThe Seventh Agent: Counting Privileged Processes on a Real GPU HostA real audit of host-level agents already running on a typical GPU host. Adding kernel-level GPU observability is a decision about whether to add a seventh privileged process or to put the instrumenta00