agreed on the limits. snitch isnt aimed at adversarial detection; its a local debugging/inspection tool. a competent attacker can blend in by design, so this isnt meant to be a standalone security control

With a name like Snitch, it should be aimed at adversarial detection.

Just my two snitches.