Akihiro Suda

cc @rata @alban @cyphar PTAL

Defining hard limit is not needed, but implementations have to raise an error when the message exceeds some implementation-specific threshold value anyway (to avoid malloccing too much), so it might...

> This should speed up doing syscalls from containers that were created > from OCI spec containing lots of seccomp rules. Any benchmark?

@cyphar LGTY?

Needs rebase

What's current status of this?

Needs rebase to make CI green

I think the README should be updated to reflect the current project status

@kolyshkin Maybe we can address those issues after merging?

> Through `annotations`, users can pass more metadata to runtime for handling hooks. The state object already has annotations. https://github.com/opencontainers/runtime-spec/blob/main/runtime.md#state Is this enough for your usecase?