#tracing

ptracer

A ptrace-based recording tool that intercepts every syscall made by a process tree — file reads, writes, forks, execves — and stores the full trace in a DuckDB database. File writes can be redirected to a content-addressed store for reproducible builds and sandboxed execution.