fix(host_agent): every Docker read is bounded, and the agent reports its own footprint (#5764)

#5764 "The agent reads a container's whole log backlog into memory, on its
main loop, with no overall deadline". Docker03's 1.13.0 agent went silent
for a day at 2.1 GB and 46 h of CPU, then ignored SIGTERM.

- One shared reader, _docker_get: each answer has an overall deadline and a
  byte cap, not only a per-recv timeout. A trickling or endless body is cut
  off (15 s / 32 MiB for JSON, 5 s / 4 MiB for a log read).
- Container logs: since the cursor but only the newest 2,000 lines, all
  within 10 s. A note says when older lines were skipped, and a container
  whose answer is too big skips ahead to now instead of re-reading its
  backlog every interval.
- The agent reports its own RSS and CPU; Steward records agent_rss_bytes
  and agent_cpu_pct, so a runaway agent shows before it goes silent.

Agent 1.15.0.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

docs/plugins/host-agent-design.md

@@ -120,6 +120,10 @@ Python 3.8+ stdlib only. `urllib.request` for the POST, plus `json`, `os`, `shut
 
 Each mount is read in a daemon thread under one 5 s deadline. A hard-mounted NFS share whose server stops blocks `statvfs` in the kernel with no timeout; read inline, that froze the whole agent. A mount that misses the deadline is sent as `{"mount", "stalled": true}`, and isn't probed again while its last probe is still blocked. Steward counts them as `mounts_stalled`.
 
+### Every Docker read is bounded (1.15.0, #5764)
+
+One Docker answer must arrive within 15 s and fit in 32 MiB, and one log answer within 5 s and 4 MiB. Past either limit the read is cut off, not waited on. A per-read timeout alone never ends a body that keeps trickling in. Container logs are read since each container's cursor, but only its newest 2,000 lines, all containers within 10 s. A container that writes more than that gets a `_steward` note saying older lines were skipped. A container whose answer is too big skips ahead to now. Before this, a 1.13.0 agent re-read a growing backlog every interval and went silent for a day at 2.1 GB. Each sample also carries the agent's own `agent` footprint (`rss_bytes`, `cpu_pct`), which Steward records as `agent_rss_bytes` and `agent_cpu_pct`.
+
 ### What happened to the host (1.14.0, #5756)
 
 A post may carry `events`, said once each, with the next post that gets through:

plugins/host_agent/__init__.py

@@ -65,10 +65,13 @@ def get_alert_metrics() -> dict[str, list[str]]:
     of the host's cores. inodes_used_pct is per mount (agent ≥ 1.13.0), and
     disk_used_pct_worst is the fullest mount by space or inodes.
     mounts_stalled counts the mounts that didn't answer the agent in time
-    (agent ≥ 1.14.0): "an NFS share stopped" is > 0."""
+    (agent ≥ 1.14.0): "an NFS share stopped" is > 0. agent_rss_bytes and
+    agent_cpu_pct are the agent's own memory and CPU (agent ≥ 1.15.0): a
+    healthy agent sits in tens of MB and a few %."""
     return {"host_agent": [
         "cpu_pct", "mem_used_pct", "mem_available_bytes", "swap_used_bytes",
         "disk_used_pct_worst", "disk_used_pct", "inodes_used_pct", "load_1m", "load_5m", "load_15m",
         "load_pct",
         "uptime_secs", "seconds_since_seen", "clock_off_secs", "mounts_stalled",
+        "agent_rss_bytes", "agent_cpu_pct",
     ]}

plugins/host_agent/agent.py

@@ -22,7 +22,7 @@ from collections import deque
 from concurrent.futures import ThreadPoolExecutor, wait as wait_futures
 from datetime import datetime, timezone
 
-AGENT_VERSION = "1.14.0"
+AGENT_VERSION = "1.15.0"
 
 # Default path to the local Docker Engine socket. Overridable via the
 # `docker_socket` config key; collection is silently skipped if it's absent or
@@ -510,6 +510,24 @@ DOCKER_LOG_BATCH_MAX_BYTES = 262144   # 256 KiB of log text per push, all contai
 DOCKER_LOG_FIRST_TAIL = 50            # lines seeded on a container's first interval
 DOCKER_LOG_FINAL_TAIL = 200           # lines read once from a container found already crashed
 DOCKER_LOG_FINAL_WINDOW_SECONDS = 600  # ... when it stopped this recently
+# A container that wrote more than this since its cursor is read from its last
+# DOCKER_LOG_MAX_LINES lines, and the older ones are skipped, not re-read every
+# interval (#5764). One log answer over DOCKER_LOG_RESPONSE_MAX_BYTES is dropped
+# and the container skipped ahead to now.
+DOCKER_LOG_MAX_LINES = 2000
+DOCKER_LOG_RESPONSE_MAX_BYTES = 4 * 1024 * 1024
+# All of one sample's log reads must finish inside this; the containers not
+# reached are read next interval.
+DOCKER_LOG_DEADLINE_SECONDS = 10.0
+# Any one Docker answer: past this size or this long, it is cut off rather than
+# waited on. A body that keeps trickling in never reaches EOF, and a per-read
+# timeout alone would wait on it forever (#5764).
+DOCKER_RESPONSE_MAX_BYTES = 32 * 1024 * 1024
+DOCKER_RESPONSE_DEADLINE_SECONDS = 15.0
+
+
+class DockerAnswerTooLarge(OSError):
+    """A Docker answer longer than the reader would hold."""
 
 
 def _dechunk(body: bytes) -> bytes:
@@ -530,30 +548,42 @@ def _dechunk(body: bytes) -> bytes:
     return bytes(out)
 
 
-def _docker_request(socket_path: str, path: str, timeout: float = DOCKER_API_TIMEOUT):
-    """GET `path` from the Docker Engine API over a Unix socket; return JSON.
+def _docker_get(socket_path: str, path: str, accept: str, timeout: float,
+                deadline: float, max_bytes: int) -> tuple:
+    """GET `path` from the Docker Engine API over a Unix socket.
 
-    Raises OSError on any socket/transport problem (absent socket, permission
-    denied, non-200) and ValueError on a non-JSON body — both are caught by the
-    caller and treated as "no docker here", so collection degrades silently.
+    Returns (status, body), the body de-chunked. Each read waits at most
+    `timeout`, the whole answer at most `deadline`, and an answer longer than
+    `max_bytes` raises DockerAnswerTooLarge without being held whole: a slow or
+    endless body is cut off, never waited on (#5764). Raises OSError on any
+    transport problem.
     """
+    end = time.monotonic() + deadline
     sock = socket.socket(socket.AF_UNIX, socket.SOCK_STREAM)
-    sock.settimeout(timeout)
+    sock.settimeout(min(timeout, deadline))
     try:
         sock.connect(socket_path)
         req = (
             "GET " + path + " HTTP/1.1\r\n"
             "Host: docker\r\n"
-            "Accept: application/json\r\n"
+            "Accept: " + accept + "\r\n"
             "Connection: close\r\n"
             "\r\n"
         )
         sock.sendall(req.encode("ascii"))
         chunks = []
+        size = 0
         while True:
+            left = end - time.monotonic()
+            if left <= 0:
+                raise socket.timeout(f"docker API {path} still answering after {deadline:g} s")
+            sock.settimeout(min(timeout, left))
             buf = sock.recv(65536)
             if not buf:
                 break
+            size += len(buf)
+            if size > max_bytes:
+                raise DockerAnswerTooLarge(f"docker API {path} answered more than {max_bytes} bytes")
             chunks.append(buf)
     finally:
         sock.close()
@@ -564,10 +594,23 @@ def _docker_request(socket_path: str, path: str, timeout: float = DOCKER_API_TIM
     status_line = header_text.split("\r\n", 1)[0]
     parts = status_line.split(None, 2)  # "HTTP/1.1 200 OK"
     status = int(parts[1]) if len(parts) >= 2 and parts[1].isdigit() else 0
-    if status != 200:
-        raise OSError(f"docker API {path} returned {status}")
     if "transfer-encoding: chunked" in header_text.lower():
         body = _dechunk(body)
+    return status, body
+
+
+def _docker_request(socket_path: str, path: str, timeout: float = DOCKER_API_TIMEOUT):
+    """GET `path` from the Docker Engine API over a Unix socket; return JSON.
+
+    Raises OSError on any socket/transport problem (absent socket, permission
+    denied, non-200, an answer too slow or too large) and ValueError on a
+    non-JSON body — both are caught by the caller and treated as "no docker
+    here", so collection degrades silently.
+    """
+    status, body = _docker_get(socket_path, path, "application/json", timeout,
+                               DOCKER_RESPONSE_DEADLINE_SECONDS, DOCKER_RESPONSE_MAX_BYTES)
+    if status != 200:
+        raise OSError(f"docker API {path} returned {status}")
     return json.loads(body.decode("utf-8"))
 
 
@@ -817,42 +860,17 @@ def _docker_request_raw(socket_path: str, path: str,
                         timeout: float = DOCKER_API_TIMEOUT) -> bytes:
     """GET `path` from the Docker API over the Unix socket; return the raw body.
 
-    Sibling of `_docker_request` for non-JSON endpoints (container logs). Reuses
-    the connect / send / de-chunk scaffolding; raises OSError on any transport
-    problem or non-2xx status so callers can silent-skip. A 200 with an empty
-    body (no new lines since the cursor) returns b"".
+    Sibling of `_docker_request` for non-JSON endpoints (container logs). The
+    whole answer must arrive within `timeout` and fit in
+    DOCKER_LOG_RESPONSE_MAX_BYTES (#5764); raises OSError on any transport
+    problem or non-2xx status so callers can silent-skip, and
+    DockerAnswerTooLarge past the size. A 200 with an empty body (no new lines
+    since the cursor) returns b"".
     """
-    sock = socket.socket(socket.AF_UNIX, socket.SOCK_STREAM)
-    sock.settimeout(timeout)
-    try:
-        sock.connect(socket_path)
-        req = (
-            "GET " + path + " HTTP/1.1\r\n"
-            "Host: docker\r\n"
-            "Accept: application/octet-stream\r\n"
-            "Connection: close\r\n"
-            "\r\n"
-        )
-        sock.sendall(req.encode("ascii"))
-        chunks = []
-        while True:
-            buf = sock.recv(65536)
-            if not buf:
-                break
-            chunks.append(buf)
-    finally:
-        sock.close()
-
-    raw = b"".join(chunks)
-    head, _, body = raw.partition(b"\r\n\r\n")
-    header_text = head.decode("latin-1")
-    status_line = header_text.split("\r\n", 1)[0]
-    parts = status_line.split(None, 2)
-    status = int(parts[1]) if len(parts) >= 2 and parts[1].isdigit() else 0
+    status, body = _docker_get(socket_path, path, "application/octet-stream", timeout,
+                               timeout, DOCKER_LOG_RESPONSE_MAX_BYTES)
     if not (200 <= status < 300):
         raise OSError(f"docker API {path} returned {status}")
-    if "transfer-encoding: chunked" in header_text.lower():
-        body = _dechunk(body)
     return body
 
 
@@ -928,10 +946,18 @@ def _parse_container_logs(raw: bytes) -> list:
     return out
 
 
+def _log_note(line: str) -> dict:
+    """A line Steward's own log collection adds to the batch, shown under
+    the "_steward" container."""
+    return {"container": "_steward", "stream": "stderr",
+            "ts": datetime.now(timezone.utc).isoformat(), "line": "[steward] " + line}
+
+
 def collect_docker_logs(socket_path: str, containers: list, state: dict,
                         exclude=None,
                         max_bytes: int = DOCKER_LOG_BATCH_MAX_BYTES,
-                        now: float | None = None) -> list:
+                        now: float | None = None,
+                        deadline: float = DOCKER_LOG_DEADLINE_SECONDS) -> list:
     """New container-log lines since the last interval.
 
     Keeps a per-container since-cursor in `state["docker_log_cursors"]`
@@ -950,6 +976,13 @@ def collect_docker_logs(socket_path: str, containers: list, state: dict,
     a push). `exclude` container names are skipped entirely (a per-host
     bandwidth opt-out). Best-effort: a per-container transport error just
     contributes nothing this interval.
+
+    What is read is bounded too (#5764): at most DOCKER_LOG_MAX_LINES lines
+    per container (the newest; a note says older ones were skipped), at most
+    DOCKER_LOG_RESPONSE_MAX_BYTES per answer (past it the container skips
+    ahead to now), and all of it within `deadline` seconds. A container that
+    writes faster than it can be read costs one bounded read per interval,
+    never a backlog re-read every time.
     Returns [{"container", "stream", "ts", "line"}, …].
     """
     exclude_set = set(exclude or ())
@@ -966,21 +999,29 @@ def collect_docker_logs(socket_path: str, containers: list, state: dict,
     out: list = []
     total = 0
     truncated = False
+    end = time.monotonic() + deadline
+    # since + tail: of the lines since the cursor, the newest MAX_LINES.
+    since_tail = f"&tail={DOCKER_LOG_MAX_LINES}"
     for name, c in listed.items():
         if name in exclude_set:
             continue
+        left = end - time.monotonic()
+        if left <= 0:
+            out.append(_log_note(f"log reading stopped at its {deadline:g} s limit; "
+                                 "the other containers are read next interval"))
+            break
         prev = cursors.get(name)
         base = f"/containers/{name}/logs?stdout=1&stderr=1&timestamps=1"
         if c.get("status") == "running":
             # since accepts a fractional Unix ts; we still dedup the boundary line.
             path = (f"{base}&tail={DOCKER_LOG_FIRST_TAIL}" if prev is None
-                    else f"{base}&since={prev:.9f}")
+                    else f"{base}&since={prev:.9f}{since_tail}")
         else:
             stopped = c.get("finished_at")
             if not stopped or finals.get(name) == stopped:
                 continue
             if prev is not None:
-                path = f"{base}&since={prev:.9f}"
+                path = f"{base}&since={prev:.9f}{since_tail}"
             else:
                 at = _parse_log_ts(stopped)
                 if (c.get("exit_code") in (None, 0) or at is None
@@ -989,11 +1030,22 @@ def collect_docker_logs(socket_path: str, containers: list, state: dict,
                 path = f"{base}&tail={DOCKER_LOG_FINAL_TAIL}"
             finals[name] = stopped
         try:
-            raw = _docker_request_raw(socket_path, path)
+            raw = _docker_request_raw(socket_path, path, timeout=min(DOCKER_API_TIMEOUT, left))
+        except DockerAnswerTooLarge:
+            # More than one answer can hold: skip to now rather than re-asking
+            # for the same backlog next interval.
+            cursors[name] = now
+            out.append(_log_note(f"{name} wrote more than {DOCKER_LOG_RESPONSE_MAX_BYTES} "
+                                 "bytes of log since the last read; skipped ahead to now"))
+            continue
         except (OSError, ValueError):
             continue
+        parsed = _parse_container_logs(raw)
+        if prev is not None and len(parsed) >= DOCKER_LOG_MAX_LINES:
+            out.append(_log_note(f"{name} wrote more than {DOCKER_LOG_MAX_LINES} lines "
+                                 "since the last read; older ones skipped"))
         newest = prev
-        for dt, stream, line in _parse_container_logs(raw):
+        for dt, stream, line in parsed:
             ts_unix = dt.timestamp() if dt is not None else None
             if prev is not None and ts_unix is not None and ts_unix <= prev:
                 continue  # boundary line already sent last interval
@@ -1012,10 +1064,8 @@ def collect_docker_logs(socket_path: str, containers: list, state: dict,
             break
 
     if truncated:
-        out.append({"container": "_steward", "stream": "stderr",
-                    "ts": datetime.now(timezone.utc).isoformat(),
-                    "line": (f"[steward] log batch truncated at {max_bytes} bytes; "
-                             "remaining lines deferred to the next interval")})
+        out.append(_log_note(f"log batch truncated at {max_bytes} bytes; "
+                             "remaining lines deferred to the next interval"))
     return out
 
 
@@ -1253,6 +1303,24 @@ class RingBuffer:
         return len(self._dq)
 
 
+def collect_self(state: dict) -> dict:
+    """The agent's own footprint: resident memory and CPU % of one core since
+    the last sample (#5764). A 1.13.0 agent once grew to 2.1 GB and spun for a
+    day before going silent; this is how Steward sees the next one coming."""
+    out: dict = {}
+    for line in _read_file("/proc/self/status").splitlines():
+        if line.startswith("VmRSS:"):
+            out["rss_bytes"] = int(line.split()[1]) * 1024
+            break
+    t = os.times()
+    cpu, mono = t.user + t.system, time.monotonic()
+    prev_cpu, prev_mono = state.get("self_cpu"), state.get("self_mono")
+    if prev_cpu is not None and mono > prev_mono:
+        out["cpu_pct"] = round(100.0 * max(0.0, cpu - prev_cpu) / (mono - prev_mono), 2)
+    state["self_cpu"], state["self_mono"] = cpu, mono
+    return out
+
+
 # ─── payload ─────────────────────────────────────────────────────────────────
 
 
@@ -1368,6 +1436,12 @@ def build_sample(mounts: list[str], state: dict,
         if logs:
             sample["docker_logs"] = logs
 
+    # Last, so its CPU covers the whole of this sample's work.
+    try:
+        sample["agent"] = collect_self(state)
+    except Exception:
+        pass
+
     return sample
 
 

plugins/host_agent/routes.py

@@ -149,6 +149,14 @@ def _expand_sample_to_metrics(
     if sample.get("uptime_secs") is not None:
         row("uptime_secs", host_name, sample["uptime_secs"])
 
+    # The agent's own footprint (#5764), so a runaway agent shows before it
+    # goes silent.
+    me = sample.get("agent") or {}
+    if me.get("rss_bytes") is not None:
+        row("agent_rss_bytes", host_name, me["rss_bytes"])
+    if me.get("cpu_pct") is not None:
+        row("agent_cpu_pct", host_name, me["cpu_pct"])
+
     # The fullest disk is the fullest by space or by inodes (#5745): out of
     # inodes, every file create fails with space to spare, so the disk rules
     # and the overview, which read disk_used_pct_worst, see either.

steward/core/formatting.py

@@ -340,6 +340,8 @@ METRICS: dict[str, tuple[str, str]] = {
     "seconds_since_seen": ("Time since the agent reported", "over 3 minutes means the agent is offline"),
     "clock_off_secs": ("Clock off by", "how far the host's clock is from Steward's, either way"),
     "mounts_stalled": ("Mounts not answering", "mounts the agent couldn't read in 5 s, e.g. an NFS share whose server stopped"),
+    "agent_rss_bytes": ("Agent memory", "the host agent's own resident memory; tens of MB is normal"),
+    "agent_cpu_pct": ("Agent CPU", "the host agent's own CPU, % of one core; a few % is normal"),
 }
 
 # Where a rule's metric comes from, as the picker and the rules list say it.

tests/plugins/host_agent/test_agent_docker_bounds.py

@@ -0,0 +1,139 @@
+# tests/plugins/host_agent/test_agent_docker_bounds.py
+"""#5764: everything the agent reads from Docker is bounded in time and size.
+
+A 1.13.0 agent read a container's whole log backlog into memory on its main
+loop, with only a per-read timeout, and went silent for a day at 2.1 GB. The
+reader tests here talk to a real Unix socket that trickles or floods, so the
+bound is the one the agent actually has, not a mocked one.
+"""
+import os
+import socket
+import tempfile
+import threading
+import time
+
+import pytest
+
+from plugins.host_agent import agent as a
+
+
+@pytest.fixture
+def docker_sock():
+    """A Unix socket that answers each connection with `serve(conn)`."""
+    d = tempfile.mkdtemp(dir="/tmp")
+    path = os.path.join(d, "d.sock")
+    srv = socket.socket(socket.AF_UNIX, socket.SOCK_STREAM)
+    srv.bind(path)
+    srv.listen(1)
+    holder = {}
+
+    def run():
+        conn, _ = srv.accept()
+        conn.recv(4096)
+        try:
+            holder["serve"](conn)
+        except OSError:
+            pass                       # the agent hung up on us: expected
+        finally:
+            conn.close()
+
+    def start(serve):
+        holder["serve"] = serve
+        threading.Thread(target=run, daemon=True).start()
+        return path
+
+    yield start
+    srv.close()
+
+
+def test_an_answer_that_keeps_trickling_is_cut_off_at_its_deadline(docker_sock):
+    def trickle(conn):
+        conn.sendall(b"HTTP/1.1 200 OK\r\nContent-Type: application/json\r\n\r\n[")
+        while True:                     # a byte every 50 ms: never idle 5 s, never done
+            conn.sendall(b" ")
+            time.sleep(0.05)
+
+    path = docker_sock(trickle)
+    began = time.monotonic()
+    with pytest.raises(OSError):
+        a._docker_get(path, "/containers/json", "application/json",
+                      timeout=5.0, deadline=0.4, max_bytes=1 << 20)
+    assert time.monotonic() - began < 2.0
+
+
+def test_an_answer_over_its_size_is_refused_not_held(docker_sock):
+    def flood(conn):
+        conn.sendall(b"HTTP/1.1 200 OK\r\n\r\n")
+        block = b"x" * 65536
+        for _ in range(64):             # 4 MiB on offer
+            conn.sendall(block)
+
+    path = docker_sock(flood)
+    with pytest.raises(a.DockerAnswerTooLarge):
+        a._docker_get(path, "/containers/web/logs", "application/octet-stream",
+                      timeout=5.0, deadline=5.0, max_bytes=256 * 1024)
+
+
+def test_a_whole_answer_still_reads(docker_sock):
+    def ok(conn):
+        conn.sendall(b"HTTP/1.1 200 OK\r\nTransfer-Encoding: chunked\r\n\r\n"
+                     b"2\r\n[]\r\n0\r\n\r\n")
+
+    assert a._docker_request(docker_sock(ok), "/containers/json") == []
+
+
+def _frame(stream: int, payload: bytes) -> bytes:
+    return bytes([stream, 0, 0, 0]) + len(payload).to_bytes(4, "big") + payload
+
+
+def _log_lines(n: int) -> bytes:
+    return b"".join(_frame(1, f"2026-10-14T12:00:{i % 60:02d}.{i:09d}Z line {i}\n".encode())
+                    for i in range(n))
+
+
+def test_a_busy_container_is_read_from_its_newest_lines_and_says_what_it_skipped(monkeypatch):
+    asked = []
+
+    def fake_raw(socket_path, path, timeout=a.DOCKER_API_TIMEOUT):
+        asked.append(path)
+        return _log_lines(a.DOCKER_LOG_MAX_LINES)
+
+    monkeypatch.setattr(a, "_docker_request_raw", fake_raw)
+    state = {"docker_log_cursors": {"web": 1791979200.0}}     # 2026-10-14T12:00:00Z
+    out = a.collect_docker_logs("/sock", [{"name": "web", "status": "running"}], state,
+                                max_bytes=1 << 30)
+    assert "since=" in asked[0] and f"tail={a.DOCKER_LOG_MAX_LINES}" in asked[0]
+    notes = [r["line"] for r in out if r["container"] == "_steward"]
+    assert any("older ones skipped" in n for n in notes)
+
+
+def test_a_container_whose_log_is_too_big_skips_ahead_instead_of_rereading(monkeypatch):
+    def too_big(socket_path, path, timeout=a.DOCKER_API_TIMEOUT):
+        raise a.DockerAnswerTooLarge("too big")
+
+    monkeypatch.setattr(a, "_docker_request_raw", too_big)
+    state = {"docker_log_cursors": {"web": 1791979200.0}}
+    out = a.collect_docker_logs("/sock", [{"name": "web", "status": "running"}], state,
+                                now=1791979500.0)
+    assert state["docker_log_cursors"]["web"] == 1791979500.0   # next read starts at now
+    assert "skipped ahead to now" in out[-1]["line"]
+
+
+def test_log_reading_stops_at_its_deadline(monkeypatch):
+    asked = []
+    monkeypatch.setattr(a, "_docker_request_raw",
+                        lambda s, p, timeout=a.DOCKER_API_TIMEOUT: asked.append(p) or b"")
+    out = a.collect_docker_logs("/sock", [{"name": "web", "status": "running"}], {},
+                                deadline=0.0)
+    assert asked == []
+    assert "limit" in out[-1]["line"]
+
+
+def test_the_agent_reports_its_own_memory_and_cpu():
+    state: dict = {}
+    first = a.collect_self(state)
+    assert first["rss_bytes"] > 1024 * 1024
+    assert "cpu_pct" not in first               # no previous sample to measure from
+    sum(range(200_000))
+    second = a.collect_self(state)
+    assert second["cpu_pct"] >= 0.0

tests/plugins/host_agent/test_expand_metrics.py

@@ -113,3 +113,12 @@ def test_a_wired_board_input_still_counts():
     assert counts_as_hottest("SYSTIN", 38.0) and counts_as_hottest("AUXTIN1", 60.0)
     assert not counts_as_hottest("SYSTIN", 114.0) and not counts_as_hottest("PCH_CHIP_TEMP", 0.0)
     assert counts_as_hottest("Package id 0", 101.0)     # a CPU past 100 is a hot CPU
+
+
+def test_the_agent_s_own_footprint_is_recorded():
+    """#5764: a runaway agent shows on the record before it goes silent."""
+    sample = {"ts": "2026-10-14T22:00:00+00:00",
+              "agent": {"rss_bytes": 18_000_000, "cpu_pct": 1.5}}
+    idx = _index(_expand_sample_to_metrics(sample, "d3", datetime.now(timezone.utc)))
+    assert idx[("agent_rss_bytes", "d3")] == 18_000_000
+    assert idx[("agent_cpu_pct", "d3")] == 1.5