<svg xmlns="http://www.w3.org/2000/svg" width="1200" height="675" viewBox="0 0 1200 675" preserveAspectRatio="xMidYMid meet">
  <rect width="1200" height="675" fill="#f7f8fb"/>
  <text x="115" y="105" font-size="28" font-family="Arial, sans-serif" fill="#182033" font-weight="700">eBPF 内核事件分层边界</text>
  <text x="115" y="140" font-size="18" font-family="Arial, sans-serif" fill="#556070">内核低层事件需要用户态采集链路补充 Kubernetes 与业务语义</text>

  <rect x="150" y="185" width="900" height="86" rx="18" fill="#eef2ff" stroke="#6366f1" stroke-width="2"/>
  <text x="188" y="235" font-size="22" font-family="Arial, sans-serif" fill="#312e81" font-weight="700">业务与应用语义</text>
  <text x="430" y="235" font-size="18" font-family="Arial, sans-serif" fill="#4f46a5">Trace、指标、日志、Service、Namespace</text>

  <rect x="150" y="300" width="900" height="86" rx="18" fill="#ecfdf5" stroke="#22a06b" stroke-width="2"/>
  <text x="188" y="350" font-size="22" font-family="Arial, sans-serif" fill="#176138" font-weight="700">用户态 agent</text>
  <text x="430" y="350" font-size="18" font-family="Arial, sans-serif" fill="#2f7a51">读取 ring buffer / maps，聚合、标注、限流</text>

  <rect x="150" y="415" width="900" height="86" rx="18" fill="#fff7ed" stroke="#f97316" stroke-width="2"/>
  <text x="188" y="465" font-size="22" font-family="Arial, sans-serif" fill="#7c2d12" font-weight="700">eBPF 程序</text>
  <text x="430" y="465" font-size="18" font-family="Arial, sans-serif" fill="#9a4b19">kprobe、tracepoint、uprobes、XDP、tc</text>

  <rect x="150" y="530" width="900" height="86" rx="18" fill="#f1f5f9" stroke="#64748b" stroke-width="2"/>
  <text x="188" y="580" font-size="22" font-family="Arial, sans-serif" fill="#334155" font-weight="700">内核事件</text>
  <text x="430" y="580" font-size="18" font-family="Arial, sans-serif" fill="#526173">网络、进程、系统调用、文件、cgroup</text>

  <rect x="905" y="190" width="115" height="420" rx="18" fill="#ffffff" stroke="#94a3b8" stroke-width="2"/>
  <text x="932" y="250" font-size="19" font-family="Arial, sans-serif" fill="#334155" font-weight="700">边界</text>
  <text x="930" y="300" font-size="16" font-family="Arial, sans-serif" fill="#526173">内核版本</text>
  <text x="930" y="338" font-size="16" font-family="Arial, sans-serif" fill="#526173">权限</text>
  <text x="930" y="376" font-size="16" font-family="Arial, sans-serif" fill="#526173">性能</text>
  <text x="930" y="414" font-size="16" font-family="Arial, sans-serif" fill="#526173">语义</text>
  <text x="930" y="452" font-size="16" font-family="Arial, sans-serif" fill="#526173">安全</text>

  <path d="M600 530 L600 506" fill="none" stroke="#64748b" stroke-width="4" marker-end="url(#arrowGray)"/>
  <path d="M600 415 L600 391" fill="none" stroke="#f97316" stroke-width="4" marker-end="url(#arrowOrange)"/>
  <path d="M600 300 L600 276" fill="none" stroke="#22a06b" stroke-width="4" marker-end="url(#arrowGreen)"/>

  <defs>
    <marker id="arrowGray" viewBox="0 0 10 10" refX="8" refY="5" markerWidth="8" markerHeight="8" orient="auto-start-reverse"><path d="M0 0 L10 5 L0 10 Z" fill="#64748b"/></marker>
    <marker id="arrowOrange" viewBox="0 0 10 10" refX="8" refY="5" markerWidth="8" markerHeight="8" orient="auto-start-reverse"><path d="M0 0 L10 5 L0 10 Z" fill="#f97316"/></marker>
    <marker id="arrowGreen" viewBox="0 0 10 10" refX="8" refY="5" markerWidth="8" markerHeight="8" orient="auto-start-reverse"><path d="M0 0 L10 5 L0 10 Z" fill="#22a06b"/></marker>
  </defs>
</svg>
