Reading Apple Silicon's performance counters without root
There is no eBPF for macOS and DTrace requires root. This paper documents what remains: sample, xctrace, the undocumented kpep event catalogue, and a method for identifying the unnamed counter slots that xctrace exports.