Covers the three failure modes Sara flagged: Caddy stopped (explicit systemctl error), symlink missing/mis-pointed (silent reload, stale smoke test), and Docker socket / nsenter unavailable (container error). Each failure mode includes symptoms and recovery steps. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>