Repository navigation
[mara] prod incident: prod-down #208
Description
🤖 mara detected a production heron incident.
- Signature:
prod-down - What: heron health endpoint unreachable or non-200 (HTTP 000)
- Health URL: http:///api/health
- HTTP: 000
- Observed (UTC): 2026-10-17T15:43:48Z
- Confirmed: failed 3/3 consecutive polls (~10s apart) — not a transient/deploy blip
Health response
000Log context
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the ED25519 key sent by the remote host is
SHA256:0Y7Sb6cd/PR1zhYtZTsva6KeYxDTxwgsBjRHlfmx7Co.
Please contact your system administrator.
Add correct host key in /home/<user>/.ssh/known_hosts to get rid of this message.
Offending ECDSA key in /home/<user>/.ssh/known_hosts:3
remove with:
ssh-keygen -f '/home/<user>/.ssh/known_hosts' -R '<ip>'
Host key for <ip> has changed and you have requested strict checking.
Host key verification failed.
(log host unreachable — the whole box may be down)
Filed automatically by mara (prod observer). Dedup window: 6h.
Add agent:assess to route this to the triage → wiwi loop once confirmed actionable.
Activity