The nodeBuiltinImport suppression was justified by the signal-0 liveness probe, but that uses the process global, which the diagnostic never inspects — and the module imports no node builtin at all since the hostname moved to HostProcessHostname. Left in place it would silently permit a future node:fs import here.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>