From the README

> The current implementation includes a security-focused x86-64 interpreter and a balanced native ptrace backend;

ptrace allows you to have the kernel redirect syscalls back to userspace, mostly for debugging purposes. "balanced" here refers to speed, but the overhead is still quite high.