The host monitor checks systemd, disk and cert expiry from outside the process. Nothing reports from inside it.
Add an unauthenticated GET /healthz returning database ping, which listeners are up, and the build commit. Small JSON body, no auth, no repo data. Register healthz in internal/policy/names.go.
closed by commit badc110670 by cmc: http: /healthz
2026-09-02 03:30 UTC