double-slit-experiment. Identify containers at runtime and observe them. No container runtime required. Read only access to the kernel.