I'm curious about the performance tax of deep packet inspection on these calls. Is this an eBPF implementation or a local proxy? Moving "guardrails" from code to infra feels like the right architectural shift, provided the latency doesn't kill the agent's UX.