Performs staged deep-dive analysis of open-source eBPF projects (architecture, hooks, maps, userspace, security, performance) in Chinese with mermaid diagrams. Use when the user asks to analyze, audit, or reverse-engineer an eBPF/HIDS codebase, or mentions FIM, Tetragon, Falco, Tracee, cilium/ebpf, libbpf, kprobe, or eBPF project walkthrough.
