This reminds me of an old USENIX talk that I found very inspiring, on Eidetic Systems, aka recording every input into the OS, write only, forever https://www.usenix.org/conference/osdi14/technical-sessions/presentation/devecsery