Module doctor 

sesame status --doctor — system health and security posture diagnostics.

Each check category is a separate module returning Vec<Check>. The runner collects, filters, formats, and optionally sets the exit code.

Modules

daemon 🔒

Daemon health checks — running state, uptime, memory, restarts.

memory 🔒

Memory protection checks — memfd_secret, core limits, swap exposure.

platform 🔒

Platform checks — kernel version, ptrace scope, display server.

sandbox 🔒

Sandbox checks — seccomp, no_new_privs, Landlock.

Structs

Check

Result of a single diagnostic check.

Enums

Status

Check result severity.

Constants

ALL_CATEGORIES 🔒

Known check categories.

Functions

chrono_now 🔒

cmd_doctor

Run diagnostic checks and produce output.

print_json 🔒

print_text 🔒