Crabtrap Proof-of-concept project involving fine-grained syscall filtering. Think seccomp-bpf meets strace's --stack-trace functionality. Blog post at whatthefox.dev.