nx_healthtruth.nx

nx_healthtruth.nx -- THE DETECTOR THE 2026-07-26 INCIDENT DID NOT HAVE. Eats debt 1785048333 (sev 9). THE DEBT, VERBATIM IN SUBSTANCE: nx_health reported {overall:OK, degraded:0, down:0} while nx_resmon measured swap_used_permil=999 with SwapFree=1136 kB of 24252332 kB -- swap 99.995% exhausted -- and the edge :8443 was refusing connections and POST /mcp was intermittently returning the STATIC SITE HOMEPAGE instead of routing to the tools daemon. WHY nx_health COULD NOT SEE IT, CONFIRMED IN SOURCE: nx_mgmt_api.nx ma_health_count() derives `reasons` ENTIRELY from a supervisor process snapshot -- duplicate procs, restart loops, "DOWN" tokens, supervisor duel. Every one of those asks "IS THE PROCESS PRESENT?" ★★★★★A LIVENESS CHECK CANNOT SEE A RESOURCE FAILURE, BECAUSE A PROCESS BEING SWAPPED TO DEATH IS STILL A PROCESS THAT EXISTS. The health endpoint was not lying about what it measured; it was measuring the wrong thing and reporting it as "overall". ⚠STILL TRUE RIGHT NOW, NOT JUST DURING THE INCIDENT. Measured live 2026-08-01 from /proc/meminfo: MemAvailable 20429704 / MemTotal 36921296 -> 553 permil available SwapFree 5710164 / SwapTotal 24252332 -> 764 permil of swap CONSUMED and nx_health simultaneously returned {"overall":"OK","degraded":0,"reasons":[]}. ★WHY THIS IS A SEPARATE ORGAN AND NOT A PATCH TO nx_mgmt_api: rebuilding the management API would ship whatever unbuilt edits other lanes have staged in that file and could take the control plane down -- an OUTAGE, not merely a blast radius, and it would sever the very transport used to observe the result. ★A FIX THAT CAN TAKE DOWN THE THING YOU WOULD USE TO VERIFY THE FIX IS NOT A SAFE FIRST MOVE. This organ makes the blindness CONTINUOUSLY MEASURABLE first; narrowing ma_health_count afterwards is then a small change against a known-good detector. WHAT IT DOES: reads /proc/meminfo (the kernel's own numbers, independent of BOTH instruments), computes pressure in permil, and renders a verdict. Thresholds are DATA, not magic numbers (Rule 11): read from knowledge/healththresh.conf when present, with documented fallbacks. license_tier: ORIGINAL expect_exit: 0