docs(system): analysis reports and EOD workflows

- Created crash analysis for 2026-03-17 OOM event.
- Documented stability test results and memory tuning effects.
- Added PARA-structured workflows for EOD protocol.
- Updated workstation health report for current 16GB swap status.

docs/tech/workstation-health.md

@@ -7,7 +7,7 @@ tags:
   - health-check
   - workstation
   - monitoring
-last_updated: '2026-03-13'
+last_updated: '2026-03-17'
 ---
 
 # Workstation Health Report: mw-manjaro-pf
@@ -19,15 +19,21 @@ last_updated: '2026-03-13'
 - **Secondary Disk**: 500 GB SATA SSD (Samsung 840 EVO) -> `/home/mw/models`
 - **OS**: Manjaro Linux (Kernel 6.12)
 
-## Current Health Status (2026-03-13)
-- **Uptime**: 13 days, 19 hours
-- **Load Average**: 1.59, 1.46, 1.23 (16 Threads)
-- **Memory**: 28/62 GiB (44% used)
+## Current Health Status (2026-03-17)
+- **Uptime**: < 1 hour (Post-reboot due to OOM crash at 18:33)
+- **Load Average**: 0.40, 0.50, 0.45
+- **Memory**: 12/62 GiB (19% used)
+- **Swap**: 0/16 GiB (0% used) - **zswap active (zstd/zsmalloc, 30% pool)**
 - **Disk Usage (/)**: 84% (371G used, 74G free)
+- **OOM Protection**: `systemd-oomd` active and monitoring `/user.slice`.
+- **Kernel Optimizations**: 
+  - MGLRU active.
+  - Transparent Hugepages: `madvise`.
+  - Proactive reclaim: `watermark_scale_factor=100`.
+  - Dirty bytes: `dirty_ratio=10`, `dirty_background_ratio=5`.
 - **Maintenance**: 
-  - Orphaned packages detected (cmake, nasm, patchelf, etc.)
-  - Logs vacuumed (88M journal)
-  - Docker environment verified (6 active containers)
+  - Crash analysis performed for 2026-03-17 incident.
+  - S.M.A.R.T. hardware check PASSED for NVMe.
 - **Failed Services**: `archlinux-keyring-wkd-sync.service` (failed)
 - **Network**: tailscale0 active (100.64.0.49), enp5s0 active (192.168.0.5)