Expand description
Read-only OS audit snapshot rebuilt from append-only session events (Phase 6).
Does not reconstruct LoopStateMachine — only aggregates kernel OS events for
introspection, tests, and tooling.
Structs§
- Budget
Exceeded Record - OsSnapshot
- Aggregated kernel OS state derived from session log (audit view).
- Process
Record - Signal
Disposed Record - Suspend
Record
Functions§
- rebuild_
os_ snapshot_ from_ events - Rebuild an OS audit snapshot from session events (newest process state wins per agent).