Fail2ban: from intentional stop to verified recovery
In a controlled founder test, mttrly detected an intentional Fail2ban stop, prepared a bounded remediation, and waited for separate human approval. The alert appeared after 6m14s; alert-to-resolution took 36s, including about 3s from approval to verified recovery, for an end-to-end cycle of about 6m50s.
Read the evidence and limitations →