TK-11996: guard uses absolute /usr/sbin/sysctl (launchd PATH lacks /usr/sbin -> was fail-closed NOT MEASURED)

450bc37f90ee3b43ec231fc29bee794a40cbe006 · 2026-09-25 13:36:30 -0700 · Steve Abrams

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01D7LB6rCwpA7ubJTqYzqXEX

Files touched

M instance-load-guard.sh

Diff

commit 450bc37f90ee3b43ec231fc29bee794a40cbe006
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Fri Sep 25 13:36:30 2026 -0700

    TK-11996: guard uses absolute /usr/sbin/sysctl (launchd PATH lacks /usr/sbin -> was fail-closed NOT MEASURED)
    
    Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
    Claude-Session: https://claude.ai/code/session_01D7LB6rCwpA7ubJTqYzqXEX
---
 instance-load-guard.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/instance-load-guard.sh b/instance-load-guard.sh
index 4dd7dd7..fad0f26 100755
--- a/instance-load-guard.sh
+++ b/instance-load-guard.sh
@@ -28,9 +28,9 @@ if [ "${1:-}" = "--test" ]; then
   alerts="${GUARD_TEST_ALERTS:-/dev/null}"; nowe="${GUARD_TEST_NOW:-$(date +%s)}"
 else
   nowe=$(date +%s)
-  boot=$(sysctl -n kern.boottime 2>/dev/null | sed -E 's/^\{ sec = ([0-9]+),.*/\1/')
+  boot=$(/usr/sbin/sysctl -n kern.boottime 2>/dev/null | sed -E 's/^\{ sec = ([0-9]+),.*/\1/')
   if [[ "$boot" =~ ^[0-9]+$ ]]; then uptime_s=$((nowe - boot)); else uptime_s=""; fi
-  memfree=$(sysctl -n kern.memorystatus_level 2>/dev/null)
+  memfree=$(/usr/sbin/sysctl -n kern.memorystatus_level 2>/dev/null)
   alerts="$ALERTS_DEFAULT"
 fi

← 0725200 TK-11996: memory/boot-grace/thrash guard on exo instance re- · back to Exo Cluster Watchdog · auto-data-snapshot: 2026-09-25T13:56:04 (2 data files) — dat b9c5df3 →