FIX actionable — auto & confirm
Clean up runs the Auto set unattended
Review & fix preview the Confirm set
Storage
● cache size Auto Clean
● btrfs scrub age Conf Scrub
● fstrim.timer Conf Enable
● deep trim (keep-1) Conf Deep trim
Snapshots
● snapper count/retention Conf Prune
● snapshot auto-timer Conf active
Packages
● orphaned packages Conf Review
● .pacnew files Conf Review
● keyring freshness Conf Refresh
Logs & coredumps
● coredumps Auto Clear
● journald disk usage Auto Vacuum
● app-log cleanup Auto Run
systemd
● maintenance timers firing Conf Enable
Network
● firewall active Conf active
● tailscale peers Conf 4/4
● fail2ban Conf active
● NTP sync Conf synced
Services
● docker reclaimable Conf Prune
● cron Conf ok
WATCH read-only — none, human & forensic
Hardware
● SMART health None PASSED
● SMART wear None 0%
● btrfs device errors None 0/0
● CPU/GPU temps None 61°/54°
● thermal throttling None no
● kernel/hardware events None clean
System & disk
● is-system-running None running
● disk usage None 69%
● btrfs unallocated None 118 GiB
● kernel taint flag None 0
● pacman file integrity Wflow clean
● reboot required Human no
Forensic (workflow)
● failed units Wflow 1 → workflow
● unclean-shutdown rate Wflow 75% → workflow
● journal error count Wflow 12 real
● memory free / OOM Wflow 104 GB free
● rsyncshot backup Wflow 3h ago
● DNS / NetworkManager Wflow ok
Memory & power
● swap / zram None 16 GiB
○ battery health None n/a
Network posture
● unexpected listeners None 3
Services & virt
● docker stopped containers None 2
○ libvirt VMs None off