Thinking of this as a means for privileged access management, would it be possible for Boundary to gather artifacts (e.g. keystroke logs and/or screen shots) from the session?

This might trigger some folks but have you explored any options for delivering some or all of the Boundary infrastructure through serverless/faas?