Container Escape Telemetry, Part 1: Isolation Primitives and the eBPF Observability Model March 31, 2026