Add crude file-granularity add/delete/change status, and running process list to moment metadata
For future search capabilities, it would be helpful to capture (and subsequently index) moments with additional metadata.
- Lists of files added/deleted/changed
- Lists of running processes (possibly arguments; possibly other attributes, like memory/CPU accounting data)
Capturing file differences should be possible ex post facto, with ZFS tools running in snapshot comparison mode. Capturing process state is probably easiest to do at moment capture time, but it's worth investigating whether the CRIU tools can be adapted to produce those from the volatile state part of moment data.