Osquery https://codeberg.org/DAWO/DAWO-Core/issues/92 via https://sextantfleet.org/ looks to be what they are using (run by main contributor)… all “policy” is via NixOS… how tenable that will be we will see, but the landing page is heavy on compliance with audits
FleetDM (https://github.com/fleetdm/fleet) is also mentioned.