distilled the zlay devlogs (zat 006-010) and incident docs into docs/lessons-from-zlay.md and applied the immediately-relevant rules: - 8 MB thread stacks for Io.Threaded and subscriber threads (zig's 16 MB default maps needless VM; 2-4 MB overflows ReleaseSafe TLS chains) - observability from day one: /metrics + /healthz served on the ws port via httpFallback — stream_build_info{git_sha,optimize} canary, event/frame counters, upstream seq, tail gauges, per-reason drops, and verification counters. shared atomic Stats plumbed through ingest and the verifier. - e2e now asserts verify_total{result=valid} > 0 on honest traffic — a verifier that silently passes everything is indistinguishable from a working one without this (the 007 extractOps lesson) Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>