Marc-André Bombeck 16024397c8 feat(observability): log heap samples and a one-time pressure report ...

runtime.heap.sampled records heap, old space, RSS, external memory and
the work in flight every five minutes, every minute at or above 70 % of
the heap limit. At 85 % runtime.heap.pressure lists the oldest requests
and jobs in flight and the routes most of them share, once, re-armed
only after the heap falls below 70 % and thirty minutes pass. A
heap-limit crash leaves no other record of what the process was doing.

HEALTHLOG_HEAP_SNAPSHOT=1 adds one heap snapshot at that moment into
HEALTHLOG_DIAG_DIR (0700 directory, 0600 file), off by default.
docs/ops/heap-diagnostics.md warns that a snapshot holds decrypted
health data and keys and says how to delete it.

2026-10-19 16:00:53 +02:00

..

migrations

feat(v1.4): multi-tenant prep — off-host backup, encryption-key versioning, worker/web split, native-Bearer UA gating (#135)

2026-05-08 14:33:39 +02:00

apple-health-distance-repair.md

fix(ops): stop the distance repair losing its rollup tail in silence

2026-09-10 00:37:15 +02:00

attempt-number-semantics.md

Correct operator runbooks against the current code

2026-08-27 12:18:34 +02:00

backup-restore.md

fix(backup): stream documents and ECG traces through backup and restore

2026-10-18 13:10:19 +02:00

blood-pressure-missing-diastolic.md

fix(idempotency): replay a key only for the same request body

2026-10-04 10:14:22 +02:00

deploy.md

feat(ops): log pending migrations before migrate deploy and document a dump before every update

2026-10-15 15:12:57 +02:00

encryption-key-rotation.md

fix(auth): count a passkey as the second factor on the managed-profile acts

2026-10-17 09:56:30 +02:00

env-check.md

Correct operator runbooks against the current code

2026-08-27 12:18:34 +02:00

heap-diagnostics.md

feat(observability): log heap samples and a one-time pressure report

2026-10-19 16:00:53 +02:00

intake-repair.md

fix: harden pnpm supply chain and runtime image (#572)

2026-07-21 04:36:53 +02:00

measurement-maintenance.md

fix(maintenance): run the measurement vacuum without a /dev/shm segment

2026-10-10 09:33:17 +02:00

mfa-enforcement.md

docs(security): note that required-MFA prompts but does not wall the API

2026-06-27 22:23:54 +02:00

migration-0409-plaintext-location.md

docs(ops): add the recovery steps for an upgrade stopped at migration 0409

2026-10-16 03:57:46 +02:00

password-reset.md

fix(image): ship the operator scripts the runbooks run in the container

2026-09-26 15:26:03 +02:00

query-statistics.md

ops: load pg_stat_statements in the bundled database

2026-10-08 15:01:02 +02:00

security-recovery.md

docs(01-09): document security contract changes

2026-07-29 14:08:37 +02:00

tls-cert-pin.md

Correct operator runbooks against the current code

2026-08-27 12:18:34 +02:00