rsyslog: no readiness check, on purpose (orchestrator, 23.09.2026). rsyslog is part of essential-before-network, which nearly every service depends on. A check on forwarding (TLS/12201) can never pass before the network, and even a local check (/dev/log belongs to rsyslogd) would stop the WHOLE boot when it fails -- today the node then boots on without logging, which is the lesser evil. Forwarding is measured by Graylog (marker test per node), not by s6. This file is documentation: s6-rc-compile ignores it (measured), and the policy is not built with dh-s6.
