operations-crash-detector

Detects OOM-kill cascades that reach session-critical processes (ssh, gnome-keyring, session.slice) -- the mechanism behind 'my computer keeps logging out my account'. A Collector<OomKillEvent> over `journalctl -k`, built on operations-diagnostic-engine rather than a bespoke parser.

What it is for

Parses journalctl -k output for OOM-kill events and flags the ones that reached session-critical processes -- the mechanism behind "my computer keeps logging out my account when pushing and CI mutating" (root-caused 2026-08-10: unconfined cargo-mutants + concurrent dev-server memory use exhausted RAM+swap; the kernel OOM killer then walked into session.slice and killed ssh / gnome-keyring-daemon).

Parsing lives here as pure, fixture-tested logic (Gate 2.1); the Collector<OomKillEvent> impl in JournalctlCollector is the only part that touches a live system, per operations-diagnostic-engine's seam (Gate 0.5: reuse the existing Collector/CollectOutcome contract instead of a bespoke report type).

Capabilities

JournalctlCollector

Parses journalctl -k output for OOM-kill events and flags the ones that

OomKillEvent

Parses journalctl -k output for OOM-kill events and flags the ones that

How to use it

No examples/ target and no doctest in this crate's rustdoc. The tests listed under Verification are the closest executable usage.

Module structure

No public modules: the crate root is its whole surface.

Public surface

`crate root`

No pub use re-exports: every item above is declared in this crate.

Boundary

Depends on no other workspace tier.

Shares tier operations with 40 other crates: operations-approval-workflow, operations-assessments, operations-block-imaging, operations-boot-media, operations-browser-agent-worker, operations-camera-discovery, operations-camera-liveview, operations-camera-registry, … (40 total).

_What this crate deliberately does NOT own is a judgment. No committed registry records one for it, so none is stated here._

Where it sits

Dependencies

Runtime, in this workspace.

Runtime, from outside the workspace.

Development. None.

Build. None.

Depended on by. Nothing in this workspace.

Signal flow — what reaches this crate, and what it reaches.

flowchart LR
  SELF["operations-crash-detector"]
  SELF -->|runtime| n_operations_diagnostic_engine["operations-diagnostic-engine"]
  classDef self fill:#1f883d,stroke:#1f883d,color:#fff;
  class SELF self;

Feature flags

No Cargo features are defined: every capability is unconditional, so no consumer can receive a half-wired crate.

Targets

Error model

No public error type was detected: no public item declares a type named *Error, and no public signature returns one.

Operational characteristics

No unsafe block, unsafe fn, unsafe impl or unsafe trait was found by the parser anywhere in this crate's source.

Configuration

No environment variable is read with a literal name anywhere in this crate. A variable whose key is computed at run time cannot be listed here, and is not claimed to be absent.

Related capabilities

No workspace crate depends on this one.

Verification

Evidence by module. How often each public module is named by something executable.

What the tests establish, by name:

• attributes_invoker_and_cgroup_to_each_kill — src/lib.rs
• carries_cgroup_forward_across_a_batched_kill_run — src/lib.rs
• collector_trait_degrades_explicitly_when_unavailable — src/lib.rs
• empty_log_yields_no_events — src/lib.rs
• flags_session_slice_cgroup_as_session_affecting — src/lib.rs
• non_oom_lines_are_ignored — src/lib.rs
• parses_every_kill_line — src/lib.rs

Documentation coverage

pie showData
    title Public items with rustdoc
    "Documented" : 2
    "No rustdoc detected" : 3

Metrics

pie showData
    title Public API by kind
    "function" : 1
    "method" : 2
    "struct" : 2

pie showData
    title Rust source composition
    "Code" : 269
    "Blank or comment" : 71

Generation

Rendered by tools-corpus corpus readme from repository evidence alone, renderer schema 2, lexicon current. No model, network service or database was consulted. Regenerate with tools-corpus corpus readme --write; verify with --check.