6000x — Ops healthcheck cron/systemd package (author-mode)

Repo commit: 4fb380e.

Verdict: DONE_WITH_EXTERNAL_BLOCKER — package authored & wrapper proven end-to-end; not installed because VPS sudo/systemd authority is not granted to this macro.

Package layout

ops/healthcheck-cron-package/
├── scripts/iu_core_healthcheck_wrapper.sh    ← cron-safe wrapper, rotates logs
├── cron/iu-core-healthcheck.cron              ← user crontab fragment (no sudo)
├── systemd/iu-core-healthcheck.service        ← oneshot, journald output
├── systemd/iu-core-healthcheck.timer          ← every 10min, OnBootSec=2min
├── install/install.sh                          ← mode {cron|systemd}, idempotent
├── install/uninstall.sh                        ← mirror, idempotent
├── handover/README.md
└── handover/runbook.md

Wrapper end-to-end proof (this macro)

$ IU_CORE_HEALTH_LOG_DIR=/tmp/iu-core-health-test/log \
    ops/healthcheck-cron-package/scripts/iu_core_healthcheck_wrapper.sh >/dev/null
$ tail -1 /tmp/iu-core-health-test/log/healthcheck.jsonl | python3 -c '…'
WRAPPER_OK exit= 0 ts= 2026-05-23T14:17:30Z surfaces= 7

• Wrapper invokes python3 -m cutter_agent.iu_core.healthcheck end-to-end.
• Healthcheck JSON for all 7 surfaces returned and logged.
• Exit 0 → all surfaces GREEN.
• One JSON-line written to the rotated log file.

Modes

• cron (user crontab) — no sudo; crontab -l; cron mail (MAILTO unset → quiet).
• systemd user timer — one-time loginctl enable-linger <user>; systemctl --user list-timers; journald --user -u iu-core-healthcheck.service.

Both modes write the same rotated JSONL log at ~/.iu-core-health/log/healthcheck.jsonl (1 MiB / 5 generations).

Surfaces covered (mirror of 5000x healthcheck)

1. three_axis_cache
2. directus_collection
3. qdrant_collection
4. auto_refresh_trigger
5. vector_boundary
6. write_gates
7. operator_runtime

Exact blocker

• VPS sudo/systemd authority not granted to this macro.
• iu-cutter host owner has not been asked to run install/install.sh.

Reversibility

./install/uninstall.sh cron       # or systemd

Logs are append-only and not deleted by uninstall. To purge: rm -rf ~/.iu-core-health/.