A sysadmin incident that is easy to miss is “the app died, but the disk was fine.” The service exits with signal SIGKILL, journalctl shows Killed process, and dmesg points to the kernel OOM killer. The problem is not just memory usage; it is that the kernel chooses which process dies. A worker process, cache, or container sidecar may be killed